In terms of permissions in script context level, level 6 has ALL PERMISSION THAT CAN BE GRANTED. Level 7 as of 2020 is for Roblox's Web API and Level 8 is for (One sided, do not mistake this for some kind of 'serverside execution' thing) replication of data from the server to client. If an exploit advertises itself as a level 7 or 8, it does not mean that it is any superior to level 6 exploits.

Changing the script context (as of 2018 used to be just changing a single value in a pointer in memory), is quite easy, and can usually be done with just a few lines.

Exploits like wrappers work directly with the raw LuaC API (pointers and such), therefore they start at the script context security level of 0, which is locked down and prevents the exploit from messing with specific things that it needs to. Changing the context level is in most cases necessary for an exploit in order for it to function properly. There are 9 OFFICIAL context levels.Īn exploit's 'level' DOES NOT describe how powerful an exploit is, how it functions or what capabilities it has, the only realistic expectations of having a level 2 vs level 6 exploit is the fact that you have access to objects like CoreGUI. This feature is sometimes called 'level', 'context level' 'security context' or 'script level', there are many terms used to describe this. Context level is an attribute on EVERY game script, to put it simply it is a 'keycard' that a script has that may or may not give it access to specific objects or properties within a game. The topic is quite large and technical, but here's what you need to know about exploit levels.Īn exploit level simply describes what 'context level' a script 'executed' by the exploit is. Well, looking at the title, the answer is pretty straightforward as this has been documented in the past and is not just a topic discussed within the exploiting community, but also in the development community.

Roblox exploit level 7