• Please report every thread you think might be harmful or does not meet expectations or the link is offline, you will be refunded the credits you paid and the Thread Starter recieves a message to update his content, if its malicious we remove it and warn and eventualy the TS if it reoccurs.

STANDALONE GRABBER DETECTION - 70% method [FREE] (1 Viewer)

rafaeninja

Active member
Joined
Dec 30, 2021
Messages
65
Reaction score
46
Points
18
Credits
141
70% method for finding out if an obfuscated script has a grabber.

How to use:
Just add it to the first line of any .lua file.

How it works:
Basically, it disables some functions and prints the parameters of these functions.
These specific functions may or may not call malicious code hosted somewhere, or hidden within the script folder.
However, as mentioned, it is 70% effective as there are several other ways.


Note:
To add more functions, just follow the same pattern.

image.jpg

-------------------------------------------------------------------------------------------------------------

Code:
function PerformHttpRequest(url, callback, method, data, headers)
    print("PerformHttpRequest:")
    print("URL:", url)
    print("Callback:", callback)
    print("Method:", method)
    print("Data:", data)
    print("Headers:", headers)
end

function SendWebhookMessage(webhook, message)
    print("SendWebhookMessage:")
    print("Webhook:", webhook)
    print("Message:", message)
end

function CreateDui(link, x, y)
    print("CreateDui:")
    print("Link:", link)
    print("X Coordinate:", x)
    print("Y Coordinate:", y)
end

function loadstring(str, chunkname)
    print("loadstring:")
    print("String:", str)
    print("Chunk Name:", chunkname)
end

function dofile(filename)
    print("dofile:")
    print("Filename:", filename)
end

function require(modname)
    print("require:")
    print("Module Name:", modname)
end

function loadfile(filename, mode, env)
    print("loadfile:")
    print("Filename:", filename)
    print("Mode:", mode)
    print("Environment:", env)
end
 
  • Post hidden due to user being banned.
  • Post hidden due to user being banned.

rafaeninja

Active member
Joined
Dec 30, 2021
Messages
65
Reaction score
46
Points
18
Credits
141
Does it avoid function execution ?
in my opinion, replacing functions can interfere with the execution of the encrypted script, but its effectiveness depends on how the encrypted script was written and whether it makes use of the replaced functions.

I wouldn't risk trusting your home host like that, you have to use a VPS to test this.
 

Users who are viewing this thread

Top