Categories > Exploiting > Roblox >
[Release] Address Dumper For Roblox
Posted
Hey WeAreDevs community!
Lately, I have been trying to find a address dumper for roblox but most of them are outdated (like XDumper) so I created my own one!
It auto-updates using EyeCrawl.
Example Address Dump: https://hastebin.com/raw/ojowuricul.txt
Download Link: https://cdn.discordapp.com/attachments/1041361823938662412/1057970382478528562/AddressDumper.exe
VirusTotal Scan: https://www.virustotal.com/gui/file/c464bcc7b238bf2d4fccddbf722b913fc99ea591cda9a1c1b18d5e0beffd7585 (False Positives because it's obfuscated + injects into roblox process)
If you have any questions, feel free to comment and I will try to reply!
Replied
nice release I guess
Cancel
Post
Replied
Please provide a Hybrid Analysis as well
Cancel
Post
https://media.discordapp.net/attachments/1013939973671624917/1027279180192292944/unknown.png
https://media.discordapp.net/attachments/1010670716062007347/1108945330847883274/image.png
Replied
hi it's me once again.
after reverse engineering this binary I concluded that it is indeed not malware, though it's not necessarily safe as it can easily cause crashes, doesn't have proper checking, and clearly hasn't been thoroughly tested or tested at all.
https://media.discordapp.net/attachments/959333771247779860/1058068070914076733/image.png
https://media.discordapp.net/attachments/959333771247779860/1058068591892762684/image.png
it's skidded too lol
https://media.discordapp.net/attachments/959333771247779860/1058069487364091924/image.png
https://media.discordapp.net/attachments/959333771247779860/1058069487867404308/image.png
it's not obfuscated or injecting into roblox's process either like you said. you're just a rambling skid who doesn't know what he's doing.
Cancel
Post
https://media.discordapp.net/attachments/1044764388546068510/1051935933836050482/Signature_4.png
Replied
Dude its look skidded from https://github.com/Developer-Mango/Roblox-Address-Dumper/blob/master/AddressDumper.cpp
Cancel
Post
https://media.discordapp.net/attachments/706429709734510622/1138184558462902424/BEST_CLIP_EVER.gif?width=660&height=371
Replied
nerd!!!!! 🤣🤷â€â™‚ðŸ™ðŸ˜˜ðŸ˜ŠðŸ˜³ðŸ˜¡ðŸ’€ðŸ¤£ðŸ˜˜ðŸ˜ŠðŸ˜‚🤦â€â™€ðŸ’•ðŸ’•ðŸ˜ðŸ˜ðŸ˜ðŸ˜ðŸ˜ðŸ˜ðŸ˜’😒😒👌👌ðŸ‘ðŸ‘ðŸ‘😢😢😳😳😳🤘🤘🤔🤔🤔ðŸ˜ðŸ˜ðŸ˜ðŸ˜ðŸ˜ðŸ˜ðŸ˜ðŸ˜ðŸ˜
/chaarsrrsrsrsrsrrsrrrs!!!! 😂🤣
Cancel
Post
Replied
what's your point lmfao???
those "leftovers" are either purposefully put there, or he didn't properly initialize them, both of which indicate he's a terrible developer, and the consequences of his incompetency have lead to non-functional checking. I am very well aware that the decompiled code IDA outputs is not the same, everyone is, that is nothing new. But it doesn't matter, because according to my tests, the decompiler output IDA provided is exactly what the behavior shows. I don't need you to tell me what to keep in mind.
They aren't even leftovers either because they're used. both of them are used throughout the binary. I have no idea what your point is supposed to be or what information you thought you were providing but you're wrong.
Cancel
Post
https://media.discordapp.net/attachments/1044764388546068510/1051935933836050482/Signature_4.png
Replied
@53326wsg... send me your google hangout chats!!!
Cancel
Post
https://cdn.discordapp.com/attachments/661621789591470090/1013919752294498314/Untitled_1366_768_px_1546_202_px_2.gif
Replied
@53326hi realnick
Cancel
Post
Replied
Unfortunately this is skidded from mango dumper
Cancel
Post
Replied
HEY MAN CAN I HAVE UPDATED AXON OR YOU ARE RACIST
Cancel
Post
We Hate VOID
Replied
@66063che you so fxkin s3exy
Cancel
Post
SOMKING THAT FXCKING PACK MY NIGGA 💯🚬
We Hate VOID
Users viewing this thread:
( Members: 0, Guests: 1, Total: 1 )
Cancel
Post