ScriptBlox is undergoing maintenance, so downtime is possible. Sorry for the inconvenience!
Universal Script ๐Ÿ“Œ
1.1k Views

Executor HTTP request vulnerability fix

Universal Script ๐Ÿ“ŒUploaded by
4 months ago
Please login to perform these actions:

Description

This script is for people who use executors such as Seliware with the vulnerability that allows scripts to access your local file system. I'd still be careful running random scripts but this should at least give some amount of protection. I recommend leaving this in your autoexecute. If you have any suggestions on how I can improve this script, PLEASE comment them. I'll be more than happy to see what I can do about it. You can also use the loadstring to always receive the latest version of this script loadstring(game:HttpGet("https://scriptblox.com/api/script/raw/Universal-Script-Executor-HTTP-request-vulnerability-fix-88720"))()

View Raw
Edited By: Danny_ Download


Comments
3
User profile picture
methaw 4 months ago
this is amazing, but they still not fixed the vuln lol
User profile picture
qluelez 4 months ago
can this work too? idk if itโ€™s as good but you can probably mess around and make it better local function extractUrl(input) if type(input) == "table" then return input.Url end if type(input) == "string" then return input end return nil end local function isValidHttp(url) if type(url) ~= "string" then return false end url = url:lower() return url:sub(1, 7) == "http://" or url:sub(1, 8) == "https://" end local function safeWrap(originalFunction, isMethod) if type(originalFunction) ~= "function" then return end return function(...) local args = { ... } local url = isMethod and extractUrl(args[2]) or extractUrl(args[1]) if not url then error("Invalid or missing URL", 2) end if not isValidHttp(url) then error("Only http/https URLs are allowed", 2) end local ok, result = pcall(function() return originalFunction(table.unpack(args)) end) if not ok then error(result, 2) end return result end end
qluelez's profile pictureqluelezcan this work too? idk if itโ€™s as good but you can...
User profile picture
pypi 3 months ago
@qluelez pal pls just publish a new script and call it "Executor HTTP request vulnerability fix V2"
Please Login to add a comment.