CONSOLE BACKDOOR SCANNER

-- dudebolt69's CONSOLE BACKDOOR SCANNER
-- Prints results in F9 console
-- Works in ALL executors

print("\n=== DUDEBOLT69 BACKDOOR SCANNER ===")
print("Scanning all scripts in game...")

local patterns = {
    "loadstring%s*%(%s*game:HttpGet",           -- Remote script loader
    "game:HttpGet%s*%(%s*[\"']https?://",       -- HttpGet to external
    "require%s*%(%s*%d%d%d%d%d%d%d%d%d%d+",     -- Big asset ID
    "writefile",                                -- Cookie stealer
    "syn%.request",                             -- Synapse hook
    "spawn%s*%(%s*function%s*%(%s*%)%s*while",  -- Hidden loop
    "https?://[^'\"]*%.(tk|xyz|top|cf|ga|ml)/"  -- Shady domains
}

local found = 0
local scanned = 0

for _, obj in ipairs(game:GetDescendants()) do
    if obj:IsA("Script") or obj:IsA("LocalScript") or obj:IsA("ModuleScript") then
        scanned = scanned + 1
        local src = ""
        pcall(function() src = obj.Source or "" end)
        
        if src ~= "" then
            local lineNum = 0
            for line in src:gmatch("[^\n]+") do
                lineNum = lineNum + 1
                for _, pat in ipairs(patterns) do
                    if line:find(pat) then
                        found = found + 1
                        print(string.format(
                            "\n[BACKDOOR] %s | Line %d\n   > %s\n   → %s",
                            obj:GetFullName(), lineNum, line:sub(1, 100), pat
                        ))
                        break
                    end
                end
            end
        end
    end
end

print("\n" .. string.rep("=", 50))
if found == 0 then
    print("SAFE: No backdoors found in " .. scanned .. " scripts!")
else
    print("ALERT: " .. found .. " backdoor(s) detected! Delete them NOW!")
end
print("SCAN COMPLETE\n")