/Hydroxide

Penetration testing tool for games developed on the Roblox game engine.

Primary LanguageLua

Script

function webImport(file)

    local owner = "LiamBogur"
    local branch = "revision"
    local website = ("https://raw.githubusercontent.com/%s/Hydroxide/%s"):format(owner,branch)
    local url = "%s/%s"
    local extension = ".lua"

    return loadstring(game:HttpGetAsync((url:format(website,file..extension))), file..extension)()
end

webImport("init")
webImport("ui/main")

Hydroxide

General purpose pen-testing tool for games on the Roblox engine


Features

  • Upvalue Scanner
    • View/Modify Upvalues
    • View first-level values in table upvalues
    • View information of closure
  • Constant Scanner
    • View/Modify Constants
    • View information of closure
  • Script Scanner
    • View general information of scripts (source, protos, constants, etc.)
    • Retrieve all protos found in GC
  • Module Scanner
    • View general information of modules (return value, source, protos, constants, etc.)
    • Retrieve all protos found in GC
  • RemoteSpy
    • Log calls of remote objects (RemoteEvent, RemoteFunction, BindableEvent, BindableFunction)
    • Ignore/Block calls based on parameters passed
    • Traceback calling function/closure
  • ClosureSpy
    • Log calls of closures
    • View general information of closures (location, protos, constants, etc.)

More to come, soon.

Images/Videos

  • Upvalue Scanner

https://i.gyazo.com/63afdd764cdca533af5ebca843217a7e.gif

  • Remote Spy

https://i.gyazo.com/aed8690c3161468ca9a3156dfdb665e2.gif