What are the limits of an exploiter?

So right now, I'm making some anti-exploit/security scripts for my game. Now, I was wondering, what can an exploiter do when he/she joins your game. Some people said that there are no limits, and your have to be ready for everything. So here's what I know: (I'm using an FE game)

• Can remove/create/move/manipulate instances (At least on the client side)

• Use RemoteEvents and RemoteFunctions (Can be fixed by using them cleverly)

• Can walk through walls (Can be fixed by placing kill bricks inside the walls)

• Can fly

• Can affect unachored parts close to the player via NetworkOwnership (Can be fixed via SetNetworkOwner)

Now, I want to know if the exploiter can do stuff like read the contents of a script, or change the health of a different player, and what else can he do? The more I know, the better.

Also, once I saw an exploit script what was supposed to work on FE games. How? Thx anything will help.

An exploiter can execute scripts which can lead into decal spam, particle emitter spam, unanchor everything, unlock everything and even use the robloxlocked property.

The most efficient way to combat exploiters is by enabling FilteringEnabled in workspace which you already did, but I also would recommend manual moderation.

Perhaps what you should try is to check all parts that get added to workspace, in that way you can prevent brick spam.

They can indeed read contents of scripts, spam parts etc. There is absolutely nothing you can do to stop them from reading your scripts, it is a ROBLOX issue. Depending on the person and their experience level, they may only be able to read local scripts or all of them (How games get dumped) However, most issues can be stopped by simply NOT USING FREEMODELS. The popular FE Btools in cafe was caused by a addpoint script which was a freemodel. There are ROBLOX issues, which you can combat by adding an active delay where the game "cleans" objects, so they cannot spam your game with tools/body parts. This can be made manually, or you can use a popular admin commands script to actively do this.. (99% have it)

However, some you cannot do anything about. You just need to hire in-game mods, or make your game EXTREMELY laggy and buggy by adding about 100 loops checking EVERY SINGLE PIECE of your game.You can also make a vote for players to restore map.

If you wanna know how to do any of this, youtube and google is your friend.