Jump to content

Protecting Your Lua Scripts


Sysadmin
 Share

Recommended Posts

  • Administrators

Hey everyone! 

We recently had a community member, @Ferib reach out to us about a Lua service they created. We're sharing it here for any of our serious power-users to take advantage of, or just try out if it sounds of interest! Let us know how it goes. On to Ferib's description:

Quote

GameGuardian is only partially able to protect your Lua script out of the box as I noticed most people pre-compile Lua bytecode (5.2) in an attempt to hide the actual script. This however is not effective as the compiled Lua bytecode represents the exact functionality of the Lua script, except that it is not in a human-readable form, giving a false feeling of security.

This is where LuaObfuscator dot com comes into play, we specialize in 'transforming' your script while maintaining the exact same functionality. This is achieved by adding junk code, extending if statements with opaque conditions, and other clever tricks. This whole process is called 'obfuscation' as is designed to make it harder for humans to understand.

Obfuscation is not encryption, encrypting a Lua script is somewhat pointless as it has to be decrypted before it can be used.

To demonstrate some transformations on the code, have a look at the following inputs and outputs from the LuaObfuscator.com tool:

Input: https://i.imgur.com/g703E4v.png
Output after CFFv1: https://i.imgur.com/rvTOHM2.png
Output after if-statements: https://i.imgur.com/adQ6ZOD.png
Output after minify: https://i.imgur.com/YYzfAE5.png

Our service is freely available at https://luaobfuscator.com, enjoy! (To start using this, go to the website and use the 'live IDE', at the moment you have to erase the demo Lua code and overwrite it with yours)

NOTE: The current version (v0.1.5b) is in Alpha and might be a bit buggy, please post bug/issues or give feedback, thanks!

Link to comment
Share on other sites

  • 3 months later...

This is great @Sysadmin, but can you also shoutout Moonsec? I feel like they deserve a shoutout just as much. Moonsec also has an awesome obfuscator that's free - and it comes with an anti-log feature. In addition, they have a paid obfuscator and a tool called LuaAuth that allows users to manage access to scripts by ip addresses.

Link to comment
Share on other sites

18 hours ago, HorridModz said:

This is great @Sysadmin, but can you also shoutout Moonsec? I feel like they deserve a shoutout just as much. Moonsec also has an awesome obfuscator that's free - and it comes with an anti-log feature. In addition, they have a paid obfuscator and a tool called LuaAuth that allows users to manage access to scripts by ip addresses.

where can i get this free tools

and thx 😊

Link to comment
Share on other sites

  • 1 month later...
  • 4 months later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.