Finding Addon Exploits?

Hey! One of my cousins had made a awesome easy to use and configurable file grabber/viewer (for lua)

but the question is how do i find and what do i look for when i am trying to exploit find?
I do have basic knowledge of lua so can anyone help

(If someone can help me , he will release on MPGH )

There's no set formula for this, you just go through the code and looks where the developer was lazy or left a thing for you to exploit.
For example:
If you find an anti-cheat with the file grabber, then you just look up the way it detects your cheats and then you counter it. Like Blue Kirby did with the GmodZ anti cheat thing. It was just checking your sv_allowcslua cvar with a timer. So he countered the anti-cheat by destroying the timer.

So if you want to find an exploit, you look up the function you want to exploit, get how it works and maybe find an exploit.