Skip to content

Instantly share code, notes, and snippets.

@pepsipriest
Created October 12, 2022 22:31
Show Gist options
  • Save pepsipriest/e6acb6b01e5c2be61474073e56f6988d to your computer and use it in GitHub Desktop.
Save pepsipriest/e6acb6b01e5c2be61474073e56f6988d to your computer and use it in GitHub Desktop.
Hyperion: What will happen, what has happened what you should do

Hyperion: What will happen, what has happened what you should do

Context:Ik I make a lot of claims even tho I am not a part of any exploit dev team, but I've known most of the OGs for a very long time and I've been here circa 2018. I'm writing this based on my experience as a script developer and my talks with exploit devs. If you don't believe me, then 🤷

TL;DR

No, Roblox exploiting is not going to die. Anybody that thinks doomsday is coming is believing in the fear, uncertainty and doubt being spread by the people that jumped too quickly to conclusions. Obviously Roblox acquiring an anti-cheat company is alarming, but not as alarming as most people make it out to be. This doesn't mean that Roblox exploiting will be left unaffected, however. A lot of exploits will crash and burn, and they won't go peacefully. Let's take a look at what could happen:

  • It is very likely that API-based exploits like WeAreDevs will die. They don't have the resources to maintain their upkeep, unlike (some) more popular competitors.
  • It is likely that Script-Ware will die. Script-Ware used to have a very talented group of devs, but most of them quit in recent months due to pay issues and only a skeleton crew capable of maintaining the software is left. Without them, Script-Ware will have problems adapting to the new anti-cheat, potentially leading to discontinuation. It's not guaranteed, but becomes likely.
  • If Script-Ware does die, then Krnl, Fluxus and associates will likely follow suit and die too. In case this is news to you: most popular free exploits are in cahoots with Script-Ware. They all follow Script-Ware's policy very closely, use Script-Ware's infrastructure, share developers, and most likely share development intelligence too. Without this lifeline, these free exploits may just give up and die.
  • Smaller scale exploits such as Temple, Celery and Sirhurt will most likely die. This may not come as a surprise to anyone, but like API-based exploits, they won't have the sources necessary to maintain their upkeep.
  • Sentinel may survive, if it ever comes out. Its developer(s?) has demonstrated rly good reverse engineering skills in the past and may put those skills to work again to develop a Byfron bypass. However, Sentinel's developer(s?) is very demotivated according to some of his friends, so I don't know if it will ever come out again.
  • Synapse X will survive, but with a twist. Synapse devs are extremely well-versed in reverse engineering anti-cheat solutions outside of Roblox. They don't rely on Roblox-only knowledge. Because of this, Roblox adopting "outsider" solutions for their AC may not be that much of a challenge to Synapse, even though they may experience some development delays due to the effort combined.

The twist? What's the twist?

3dsboy08 has been hinting lately that Synapse X will switch to a subscription-based licensing model. This hasn't been formally announced yet, but he revealed it to some users in the Synapse discord server and other contacts. If they do switch, that means you will have to pay a recurring fee for using the executor. This can be surprising since no one has done it for Roblox before, but don't forget that most hack tools outside of Roblox are subscription-based, so subscriptions are really the rule, not the exception. It's likely that existing users will receive some kind of benefit or credit for already owning a copy.

Sentinel is also likely to switch to a subscription model. PainExists, the owner, has announced it too. If that happens, then every major exploit will eventually become subscription-based, ending the era of lifetime licensing for Roblox exploiters. I don't know the details of their policy (tbh I've heard as much from Sentinel as I did from Synapse, so that's something) and I don't even know if Sentinel is going to be released at all since its developer(s?) is apparently really tired and demotivated from his environment so I can't say much.

For the love of everything holy PLEASE buy Synapse.

I haven't been a big fan of Synapse lately especially since they refused to join the UNC, which would have made my life so much fucking easier, and their support sucks cock with months-old tickets that have yet to receive a reply, but credit where's credit due, they have been the singlehandedly most reliable exploit since I learned Roblox exploiting was even a thing. Most of the competition have been letting me down kinda regularly, especially with downtime or instability or the stupidest of controversies (I mean, what the fuck?) but Synapse X has an impressive history of zero serious fuck-ups. Nostalgia also compels me to use Synapse X because golden era exploit developers are working (or have worked) for them, like the Elysian dev, or the Seven dev, which imo means that if you trusted these exploits, you can trust Synapse as well.

If you are looking for a long-term investment, please please PLEASE use Synapse X. If you use Script-Ware or another competitor (even free exploits) then at least prepare yourself for a MASSIVE disappointment the day they decide to throw in the towel because Roblox's new anti-cheat measures have seriously fucked their projects up. Even if they don't throw in the towel, you can expect features and other functionality to be lost by the gallon every other week because they'll probably be unable to find good workarounds. With Synapse X, you know you'll have the same experience for a really long time, even with Byfron. People that have bought the original version in 2016 are still having the same improved experience today, without interruptions or big rebrandings, can you say the same of any other exploit?

@Mars7383
Copy link

It is likely that Script-Ware will die. Script-Ware used to have a very talented group of devs, but most of them quit in recent months due to pay issues and only a skeleton crew capable of maintaining the software is left. Without them, Script-Ware will have problems adapting to the new anti-cheat, potentially leading to discontinuation. It's not guaranteed, but becomes likely.

If Script-Ware does die, then Krnl, Fluxus and associates will likely follow suit and die too.[...] They all follow Script-Ware's policy very closely, use Script-Ware's infrastructure, share developers, and most likely share development intelligence too.

You've discredited numerous experienced developers with no line of reasoning. Which developers have left due to "pay issues", and how does the lack of these individuals make the collapse of Script-Ware and all of it's associates more imminent? Why are the current developers of the executors unable to continue without the ones who left? According to WhatExploitsAre.Online, this "skeleton crew" has been able to provide consistent and well-timed updates for the past 30+ weeks, just like their competitors.

Sentinel may survive, if it ever comes out. Its developer(s?) has demonstrated rly good reverse engineering skills in the past and may put those skills to work again to develop a Byfron bypass.

Synapse X will survive, but with a twist. Synapse devs are extremely well-versed in reverse engineering anti-cheat solutions outside of Roblox. They don't rely on Roblox-only knowledge. Because of this, Roblox adopting "outsider" solutions for their AC may not be that much of a challenge to Synapse[...].

How can you assume that these developers are the only ones with the necessary experience needed to continue? How does this guarantee that they will survive? If "good reverse engineering skills" is the only requirement to sway your opinion from potential discontinuation to the possibility (or even guarantee) of survival, you should better evaluate the Script-Ware/Krnl/Fluxus developers. Absence of evidence is not evidence of absence; just because you haven't seen these developers display an exceptional level of skill does not mean they are incapable of doing so. You said in your foreword that you've spoken to exploit devs—who are they? Are any of them from Script-Ware/Krnl/Fluxus? If so, what makes you think that they won't succeed?

@SolarFlareFromPG3D
Copy link

The dicksucking is strong with this one

Copy link

ghost commented Oct 18, 2022

Synapse X has an impressive history of zero serious fuck-ups

Not only do you mention one of these serious fuck-ups right before this outright false statement, I could easily list many more:

Serious vulnerabilities:

  • Another ACE
  • MessageBusService ACE
  • v3 Electron UI Powertools ACE
  • Several __namecall hook bypasses
  • Several PromptPurchase hook bypasses

Less serious, but nonetheless noteworthy vulnerabilities:

Detections:

  • Stack overflow detection
  • ccalls detection
  • GC detection
  • gcinfo detection
  • Marketplace detection
  • ScriptContext.Error detection
  • Three separate hookmetamethod/hookfunction detections
  • Every single attempt at blocking a function for security reasons, lead to a new detection vector (eg. MessageBusService)
  • (Many more omitted for brevity reasons..)

Miscellaneous scandals:

  • A developer getting ratted, leading to the old v2 source getting leaked
  • Cybersecurity guy getting ratted
  • The era where the Synapse staff team took turns getting exposed for grooming underage girls
  • The era where the Synapse Discord was plagued with child pornography, beastiality pornography, and other illicit material
  • Blaming uninvolved people for some of the aforementioned scandals (ACE, SecureLua v2)
  • 'Shadow-blacklisting' random, uninvolved people, simply for being roled in an opposing Discord

@AlrightThenNoWhat
Copy link

Dude trash talking other people and dickriding Synapse won't encourage others to buy the subscription. If it's worth it, people will buy it. If not, people will go to competitors regardless.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment