

Sup everyone,im back with a cool guide that im sure you'll like,in this guide i will be sharing with you my knowledge of bol script cracking.I will tell only the first part of the method and i will let you do the rest,because i dont want all noobs on this site that have absolutely 0 knowledge of scripting for bol and generaly programming,to come to this thread and start posting "what is this?","how can i do this?" etc.Before some time i was a noob at cracking like everyone else,but i wanted to find out how to crack scripts and after a LOT of research i finally managed to do it and i want everyone to know the method and get their blood back from that money thirsty community(bol).Plz consider leaving a thanks or rep because this is the most detailed and understandable guide for script cracking you can find(Not a lot of people would waste their time to make guides for starters

)Also i have almost all paid scripts cracked and up to date if you want them pm me.So lets start:
Tools You Will Need:
1.A Xor Decrypting tool,i will attach the one i use.
2.A Luac decompiler,i will attach this one too.
3.A site that can decode Base64 encryption(check the guide below for a site)
So before going going i will first explain how scripts are encrypted.The scripts are encrypted with this order:
Lua(the source of the code)->Compiled to lua bytecode(luac)->Then the luac is Encrypted with Xor->And the encrypted code for Xor is then encrypted with Base64
All in all scripts have 3 layers of encryption.This may seem xtremly difficult to decode but believe me,it takes less than 5 mins if you practice it.So lets get to the fun part,to crack scripts you have to decrypt each type of encryption with the order i gave you(Basically that one is how it is encrypted,the decrypting order is the opposite of that one: Base64->Xor->Luac)and then you will have the source code where you will have to remove the auth or make any changes you want to the code.The first encryption is Base64,so we need to find a sites that can decode it.I recommend using motobit(google motobit and it will be first)because u can also download the decoded file and it is very essential to download it.We need a script that is encrypted with Base64 and then we copy the official code after the LoadVipScript or the LoadProtectedScript thats in the ("....") and paste it on the decoding site,in this case motobit.But whats out because not all scripts are encrypted with base64(like the code you will find in the safeloader(...) )Base64 looks like this:
Code:
G0x1YVIAAQQEBAgAGZMNChoKAAAAAAAAAAAAAS9kAQAABgBAAA
Anythink that doesnt look like that is not Base64 and it wont get decoded if you follow this guide.After you paste the code on the site select decode,export to binary file and hit the "Convert the source data" button and save the file somewhere.Now you will have a file named base64.bin or whatever you named it that will contain the base64 decoded stuff,in other words you got the Xor encrypted code now,gratz.Easy stuff is over,we still have to decode the Xor and the luac and encryptions to get the source.After Base64 is Xor,so download the xor tool that i attached to the thread,unrar it and you will get a folder with a program called xor.exe.This program will auto-crash if you try to open it,because it is not made to open like that,but with a cmd or Command Prompt.If you dont know how to open a cmd you are a total noob but dont get disappointed(lol) and use google to find how to open it.After you open it you need to set the path of the cmd to the folder where you have the xor.exe.To do this type in the cmd:
Code:
cd "The dir of the xor.exe"
Ex.: cd C:\BilakosBF3\Downloads\xor
After this the dir will change from C:\MyWoodenPc\blah\blah To C:\MyWoodenPc\blah\xor or whatever is the directory you have the xor folder(This is an example it wont say the same).After this you have to take the base64.bin you downloaded and put it on the same folder as xor.exe otherwise it wont work.The form you have to put to the cmd to decode Xor is this:
Code:
xor.exe "Your decoded base64 file" "Name of the file that the xor decoded data will go" "Xor Key"
Ex.:xor.exe base64.bin xordecode.bin MyVIPL33tKEy
You can change the name of xordecode.bin to whatever you want but dont change the .bin.Also the xor keys are:
Code:
LoadVIPScript(VIP Scripts): MyVIPL33tKEy
LoadProtectedScript(FREE Scripts): MyFreEL@m3KEy
You have to put these keys in the "Xor Key" part after the name of the xor decoded file name.So now you decrypted xor too and you have the xordecode.bin(or whatever you named it)which contains the lua bytecode,the last layer of the encryption.The tool i will attach is named unluac and it is a .jar file that can be run only by cmd just like xor.exe.I recommend putting unluac.jar and xor.exe(basically xor.exe requeires the file xor.c which is included in the rar so if you change folder to xor.exe take along xor.c)together in the same folder because that way you wont need to change the directory of the cmd each time you change tool.So lets decode the last layer and get the source,firstly unluac has some problems when decrypting and even if the file is lua bytecode and everything is right it may not decompile it,if the decompiling process fails the first time try again and see if you have any mistakes.Before decompiling,open the file with the decoded data of xor,go at beginning and see if it says LuaR and some sympols after it,if you cant see LuaR at the first line then the decoded data is not compiled in luac but almost 99% of the times you will decrypt xor successfuly it will say LuaR at the first line.To decompile luac,firstly make sure that you set the cmd directory to the folder the unluac.jar is in and then the command to run it is this:
Code:
java -jar unluac.jar myfile.lua > myfile_decompiled.lua
Ex.: java -jar unluac.jar xordecode.bin > luacdecode.bin
You have to take the file with the decoded xor data in the same folder with unluac.jar otherwise it wont work,just like xor.exe.If you type the command corectly and it doesnt work or it says stuff about java then the problem is on the java your computer has or something related to that.When you type the command and hit enter it wont send out any messages on the cmd but the file will be created,actually if it sends any messages after you hit enter it means the decompilation failed for some reason.After you will probably have the file with the decompiled luac in other words the source code of the script,all in plain text.This is the end of part 1 out of 3 for cracking scripts,i wont continue to tell you about the other parts and i will let you search for it.The second part is where you have to delete the auth,this may sound easy to say but it is actually the most difficult part of this process and may take looooong time to get past this,there is no function saying "Function ScriptAuthDeleteMeIfYouAreCrackingThisScript".The code will be in plain text but for you,noobs,the code will seem to be in chinese and if you are from china it will seem like english but if you are chinese and you know english too it will seem like the code is still encrypted :P.If you manage to delete the auth,well,gratz you are a script cracker and only the part 3 or the easiest part,is left which requeries you to compile the code with lasm,encrypt with base64 and load it.If you ever manage to delete the auth and you need the function to load the cracked base64 code pm me.This is the end of my guide,make sure to read the whole guide before asking stupid questions and pm me only if u have a serious question(about the cmd commands,directories etc.)Also forgive me for any english mistakes