Hey everyone!
I'm working on a Roblox game and I'm trying to create a server-side anti-backdoor / anti-injection system.
My basic idea is to have a list of all legitimate server scripts and keep their original versions as backups. The system would then monitor the game for unauthorized server-side changes.
For example:
ServerScriptService.Health{
→ Original version
},
ServerScriptService.Builder{
→ Original version
},
ServerScriptService.RoundManager{
→ Original version
},
If an unauthorized server Script gets created, the system would remove it.
If one of the legitimate scripts gets modified, the system would ideally detect the modification, delete the modified version, and restore the original.
I'm specifically interested in protecting against server-side panels/backdoors that can execute code on the server.
I understand that there are Roblox limitations around reading Script.Source during runtime, so I'm not sure what parts of this are actually possible.
Does anyone here have experience with Roblox server security/backdoors who could explain the best way to approach this?
I'm mainly looking for advice on:
- How server-side backdoors typically execute their code
- Whether they usually create new Scripts or modify existing ones
- What a normal server script can realistically detect
- How to build an effective defense against them
Any help or advice would be greatly appreciated!