Skip to content

Penetration testing tool for games developed on the Roblox game engine.

License

Notifications You must be signed in to change notification settings

TechnicallyTotally/Hydroxide

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Script

local owner = "TechnicallyTotally"
local branch = "revision"

local function webImport(file)
    return loadstring(game:HttpGetAsync(("https://raw.githubusercontent.com/%s/Hydroxide/%s/%s.lua"):format(owner, branch, file)), file .. '.lua')()
end

webImport("init") -- ctuidseehv ^-^
webImport("ui/main")

spongdroxide (Hydroxide)

General purpose pen-testing tool for games on the Roblox engine

Please report issues at the "Issues" tab in github, instead of DM'ing me

By Luiz


Features

  • Upvalue Scanner
    • View/Modify Upvalues
    • View first-level values in table upvalues
    • View information of closure
  • Constant Scanner
    • View/Modify Constants
    • View information of closure
  • Script Scanner
    • View general information of scripts (source, protos, constants, etc.)
    • Retrieve all protos found in GC
  • Module Scanner
    • View general information of modules (return value, source, protos, constants, etc.)
    • Retrieve all protos found in GC
  • RemoteSpy
    • Log calls of remote objects (RemoteEvent, RemoteFunction, BindableEvent, BindableFunction)
    • Ignore/Block calls based on parameters passed
    • Traceback calling function/closure
  • ClosureSpy
    • Log calls of closures
    • View general information of closures (location, protos, constants, etc.)
  • Instance Viewer (WIP)
    • View properties and methods of certain instances
    • View how many descendants and methods an instance has
    • Edit properties & run methods with any arguments
  • Http Spy (TESTING)
    • Log the use of the request or syn.request function
    • Log the use of game:HttpGet and game:HttpGetAsync
    • Log the use of HttpService's request functions (SOON)
    • Prevent people from using anti-HttpSpy

More to come, soon.

Images/Videos

Spongdroxide's Modifications

  • Source tab & Environment tab in Script Scanner are now fully functional
  • RemoteSpy has more context menu buttons, like "Copy Arguments"!
  • RGB Mode
  • View a module's return value (Module Scanner)
  • New instance viewer tab, which is not yet complete sadly
  • Quick Loading (Enabled by adding the "quick_loading.oh" file)
  • More error handlers for specific parts
  • Possibly faster at loading and other stuff
  • A new HTTPSPY tab

Testers & Credits

  • Testers

    • Currently there's no testers, DM spongus#7609 to become one!
  • Credits

    • sponguss: Scripter
    • Upbolt: Creator of Hydroxide
    • Dylann: Ideas
    • brr/Brodi: Testing Game

Have any ideas or want to contribute to Spongdroxide? Make a pull request or DM spongus#7609 to be a developer!

About

Penetration testing tool for games developed on the Roblox game engine.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Lua 100.0%