Protecting Your Lua Scripts

[Sysadmin]

Hey everyone! 

We recently had a community member, @Ferib reach out to us about a Lua service they created. We're sharing it here for any of our serious power-users to take advantage of, or just try out if it sounds of interest! Let us know how it goes. On to Ferib's description:

Quote

GameGuardian is only partially able to protect your Lua script out of the box as I noticed most people pre-compile Lua bytecode (5.2) in an attempt to hide the actual script. This however is not effective as the compiled Lua bytecode represents the exact functionality of the Lua script, except that it is not in a human-readable form, giving a false feeling of security.

This is where LuaObfuscator dot com comes into play, we specialize in 'transforming' your script while maintaining the exact same functionality. This is achieved by adding junk code, extending if statements with opaque conditions, and other clever tricks. This whole process is called 'obfuscation' as is designed to make it harder for humans to understand.

Obfuscation is not encryption, encrypting a Lua script is somewhat pointless as it has to be decrypted before it can be used.

To demonstrate some transformations on the code, have a look at the following inputs and outputs from the LuaObfuscator.com tool:

Input: https://i.imgur.com/g703E4v.png
Output after CFFv1: https://i.imgur.com/rvTOHM2.png
Output after if-statements: https://i.imgur.com/adQ6ZOD.png
Output after minify: https://i.imgur.com/YYzfAE5.png

Our service is freely available at https://luaobfuscator.com, enjoy! (To start using this, go to the website and use the 'live IDE', at the moment you have to erase the demo Lua code and overwrite it with yours)

NOTE: The current version (v0.1.5b) is in Alpha and might be a bit buggy, please post bug/issues or give feedback, thanks!

[HorridModz]

This is great @Sysadmin, but can you also shoutout Moonsec? I feel like they deserve a shoutout just as much. Moonsec also has an awesome obfuscator that's free - and it comes with an anti-log feature. In addition, they have a paid obfuscator and a tool called LuaAuth that allows users to manage access to scripts by ip addresses.

[LaToM]

18 hours ago, HorridModz said:

This is great @Sysadmin, but can you also shoutout Moonsec? I feel like they deserve a shoutout just as much. Moonsec also has an awesome obfuscator that's free - and it comes with an anti-log feature. In addition, they have a paid obfuscator and a tool called LuaAuth that allows users to manage access to scripts by ip addresses.

where can i get this free tools

and thx

[HorridModz]

On 11/18/2022 at 4:27 PM, LatoM said:

where can i get this free tools

and thx

discord.gg/moonsec

[Ferib]

On 11/18/2022 at 10:27 PM, LatoM said:

where can i get this free tools

and thx

Or try something that doesn't put immature/offensive text in your code https://luaobfuscator.com/forum/post/6/Adding-LuaObfuscator-to-your-GitHub-repo

[HEROGAMEOfficial]

On 7/26/2022 at 4:09 AM, Sysadmin said:

available at https://luaobfuscator.com, enjoy

Very very bad.

[HEROGAMEOfficial]

Q: Protecting Your Lua Scripts

A: Don't share to public.

i can decrypt all type encryption, No matter how complex you encrypt it, gg provides the best service to those who know it.

[HEROGAMEOfficial]

On 25/11/2022 at 23.12, HorridModz said:

discord.gg/moonsec

I waited almost to death:

Obfuscoting . . .

Edited May 5, 2023 by HEROGAMEOfficial