RedStar Exploitation Framework

The RedStar Exploitation Framework is a free and open source serversided exploitation utility designed to attack a Roblox game's core elements. Rather than simply giving you tools or flashy lights, RedStar allows you to affect the game on a global scale. RedStar includes utilities for tampering with Datastores and Administrative panels, tools for gathering information on various aspects of a game, tools for single-server administration, and more.

Script Editor

The script editor provided by the RedStar exploitation framework allows you to execute Lua code on the server by use of FiOne. Other modules within RedStar may forward scripts to the editor for execution and/or additional tinkering.

Object Explorer

RedStar incorporates tyridge77's Live-Game Explorer, allowing you to view all of the objects within a game from both the perspective of the Server and the Client. Live-Game Explorer has been modified to function properly without the need for issuing HTTP requests to retrieve its APIs.

Remote Scanning

RedStar includes an advanced utility for scanning, monitoring, and invoking a game's Remote Events. With serversided access, RedStar can also fire remote events from another user in the current server, and can intercept and display data sent to Remote Events.

RedStar monitoring "SomeRemote", which is fired every 5 seconds with the given string.

Invoking a Remote Event

1. Select the player the signal should come from.
2. Add arguments via the '+' button. Change argument type and set argument values as necessary.
3. Hit Play.

Player Administration

RedStar allows you to manage players in the current server with a variety of actions.

Simple actions:

1. Kick - Kicks the player from the current server.
2. SBan - Bans the player from the current server.
3. Ghost - Hides the player from the game's Leaderboard and Escape menu, making it seem as if they have left the server.
4. Crash - Crashes the player.
5. Kill - Kills the player.
6. GoTo - Teleports you to the player.
7. Bring - Teleports the player to you.
8. CopyUI - Copies all GUI on the player's screen to your screen.
9. RedStar (Currently Unusable) - Loads a copy of RedStar onto the player.

Advanced actions:

1. Teleport - Teleports the player to the given Place.
2. ForceChat - Forces the player to send a chat message. Works with Legacy Chat only.

Other:

1. Export - Exports the player to RedStar's script editor for additional tinkering.

CreatorSploit

CreatorSploit, or CSploit, is an advanced utility that can detect and generate payloads to tamper with popular server administration models. For example, ranking players, banning players, etc. If CSploit detects any supported model to be in the game, an entry for it will be automatically added to the CSploit page.

Current payload list:

1. HD Admin (Rank, Unrank, and Permban)
2. Kohl's Admin Infinite (Role, Unrole, and Permban)
3. Adonis Admin (All features, explained later.)

More payloads will be added to CSploit in the future as RedStar development progresses.

Adonis

Excerpt taken from RedStar's CSploit Adonis tutorial:

Adonis is an extremely secure administration framework. As expected, attacking it is a bit complicated.

RedStar is able to attack Adonis by importing a secondary Adonis model into the game. Within this secondary model, you are ranked as "Creator", giving you full access to all commands within the secondary model. The command prefix for the secondary model is '>'.

If both the secondary Adonis model and the game's native Adonis model share the same Datastore and Datastore Encryption Key, then any game-wide changes made within the secondary model will apply to the game's native model. (e.x. permbanning players, ranking players)

The Datastore Name can be found within RedStar's Datastores module.

The Datastore Encryption Key is set by the game's developer, and is tucked away within the Adonis Settings modulescript, which is usually parented to nil. In some games, the Settings modulescript may not be parented to nil, and can be located and read from in RedStar's Modulescripts module. If the developer has not set a custom Datastore Encryption Key, Adonis uses "CHANGE_THIS" as the default Key.

Modulescript Info

RedStar's Modulescripts module allows you to scan for modulescripts within the game. RedStar can require a modulescript, parse through the returned data, and format it to be read by the user.

Datastore Browser

RedStar's Datastore Browser lets you view all of the datastores within a game, their keys, and the contents of their keys. Datastores and Datastore Keys can be exported to RedStar's Script Editor for additional tinkering.

Server Console

This is just a server console log. Nothing special here. Text resets every 500 entries to conserve memory.