My friend told me some paid exploits are able to access ServerScriptService/ ServerStorage, although I thought these were untouchable to explotiers in all cases. I asked him to show me with an exploit he owns, which didn't work, but he said that was because he didn't have one of the good ones.
If they can be accessed, how come you don't see leaked server scripts from games more often? When I asked him that he said that there are in fact leaked server scripts if you look hard enough, but I didn't see any myself.
6 comments
As an ex-exploiter, I can verify, it is possible but isn't easy to access ServerScriptService and ServerStorage I believe. I quit exploiting a long time ago since then so I don't know if it improved since then.
Was that before FilteringEnabled was forced on all games?
I'm pretty sure you need a backdoor on the server to access ServerStorage or ServerScriptService from the client. If you don't then I'm pretty sure it is impossible. I'm not answering because I'm not too sure.
It is impossible without a backdoor; no exploit, including paid is capable of doing so unless a backdoor is manually inserted via plugin malware, an undisclosed program written by an affiliate of the game owner, or illegal hacking of a ROBLOX server.
I am an exploit writer, though mainly for practice and expansion of knowledge. I understand it's placement in Filtering Enabled situations, as well as general Client-Server communications. I can assure you it's not possible without the scenarios listed above.
Sorry for the late response - thank you to all the people who answered, I was quite suspicious (even a bit worried) about the claim and it's good to be reassured.