Filtering Enabled Bypass [Lua Script] [7/11/2018]

-- To run this bypass, the exploit you will need to run this script requires getrawmetatable that actually unlocks the metatable and supports loadstring. Because of the requirements, this bypass modifys the __index metamethod and exploits a vulnerability with onserverevent.

-- If you get a error upon executing the script, such as "loadstring() is not available" it means your exploit does not have a custom implementation for loadstring and will not run the script.

-- After you ran the script, you can execute serversided lua code by passing lua code to the function game:Execute or you can pass lua code to a RemoteEvent it creates in ReplicatedStorage and therefore bypassing Filtering Enabled because Server scripts replicate on FilteringEnabled servers not LocalScripts. See more on FilteringEnabled: http://wiki.roblox.com/index.php?title=A...ingEnabled

-- Example script (calling game:Execute and passing lua code in the function argument): game:Execute("workspace.Gravity=0")

-- Example script (calling the RemoteEvent that is created in ReplicatedStorage): game:GetService("ReplicatedStorage').RemoteEvent:FireServer("workspace.Gravity=0")





Begin = function()


local gMetatable = getrawmetatable(game)

local Index = function(self, k)
    local Function = string.lower(k)
    if Function == "Execute" then
    return function(self, source)
        return { loadstring(source)() }
        end
    end
end

local o_Index = gMetatable.__index
gMetatable.__index = function(self, k)
    local v = index(self, k)
    if v then
    return v
    end
    return o_Index(self, k)
end

local o_Namecall = gMetatable.__namecall
gMetatable.__namecall = function(self, ...)
    local args = {...}
    local method = table.remove(args)

    if type(method) == "string" then
    local ret = Index(self, method)
    if ret then
    return ret(self, unpack(args))
    end
    end
    return o_Namecall(self, ...)
end


local RemoteEvent = Instance.new("RemoteEvent")
RemoteEvent.Parent=game.ReplicatedStorage

RemoteEvent.OnServerEvent:connect(function(Source)
    game:Execute(Source)
end)
end
spawn(function() Begin() end)