This is a simple function that just randomizes humanoid properties but the decompiled version still has some errors (mainly because of the upvalues). Local v30 = string.find(v24.Name, nil, true) This is what the decompiled code roughly looks like: local v8 = :WaitForChild():WaitForChild('jump') ** It’s advisable to keep your client-sided anticheats embedded in a core/integral localscript so that if that script is tampered with, that’ll also impact the cheater’s capabilities too. The above method is possibly bypassable regardless as it’s done on the client. :Destroy() -welp they hooked it and it's not returning what it should return, it's hookedĪfter detecting you can kick, destroy, crash, delete the script itself if it’s a core script, etc.:ĭisclaimer: Sanity checks and server-sided anticheats are always preferred and should be your most powerful, important and, final line of game security.

If antifunctionhook() ~= 19 and typeof(antifunctionhook()):lower ~= 'number' then -integrity checking the returned value Integrity check the vulnerable function:Ĭoroutine.resume(coroutine.create(function() Return x-the normal value being returned when function's called Local x = 19 - the expected/normal output Our function that is getting function hooked by the cheaterįunction antifunctionhook() -the name of the function being hooked To protect a vulnerable function, you’d want to integrity check it. Hookfunction(v, function(.) end) -hooks that function & sets it to return nothing If debug.getinfo(v).name = 'antifunctionhook' then -targets our function's name If type(v) = 'function' and getfenv(v).script = (game:GetService('Players').) then -targetting a function method in a script path locates the localscript => function => name of function => hooks it and returns nil.įor k,v in pairs(getgc()) do -loops in the garbage collection for the functions and lScripts Grabs the target function from the garbage collector, Functionhooks are used to hyjack functions and make them return an augmented value.įor example, a functionhook would be used to set the taser receive function of Prison Life’s localscript to nil and allow the player to become immune to being tased.īelow is an example of a higher security context level functionhook: -FunctionHook They’re basically part of the exploit-level library that is inaccessible to Roblox Studios level LUA code. Hello! Today I’d like to openly share my research about functionhooks and how to protect a function from a function hook attempt.

How to remove script hook v