a-hello. i am slappy826. i work on the anticheat for finobay, and today i will be showcasing a vulnerability found in the 2007 roblox client. alright lets get started. uh the first thing we'll be doing is connecting to the server. umm i should also note this is the original 2007 client, unmodified, except for 1 thing as you can see. i have access to all of the tools without them going away, thats the only difference. alright now i will be loading a character on the server for me as you can see. and now i will be running the payload as you can see. here we go. and now all i have to do now is trigger the payload which would normally by now on any.. you know, like finobay and such this would have already been triggered since i am not running any other scripts on the client currently the bug cannot be triggered. so we're just gonna you know do some things with workspace. and as you can see it's trying to close my client. aaand this would not normally pop up on the client it would just automatically close. so we're gonna click 'no' aand go ahead and close the client, simulate a shutdown, now we're going to go ahead and open up the client again. and then we're just gonna go and follow the same process of reconnecting. lets go ahead and open a place. go aheead and grab this. connect. and then uh there we go. so now, simply, load the payload again uhhh first we need a character. there we go. so now we load the payload again and then again we would do this and youll notice there was something different this time. as you can see, when i printed workspace, it printed that and opened the calculator. i have achieved remote execution. which means i could go ahead and do powershell and download a remote access trojan or something of the likes and basically meaning i have full access to your computer through you joining my game 2 times. thank you for watching. that is all.