◈ Cryptic

Sign in

Only approved Google accounts have access to this dashboard.

Server isn't configured yet. Set GOOGLE_CLIENT_ID, ADMIN_MAIL and SESSION_SECRET in Cloudflare.
◈

Cryptic

0 Scripts
0 Total executions
– Most used script

Create new script

1

Uploaded scripts

Loading scripts...

🔒 Security notes

  • Access: only emails listed in ADMIN_MAIL can sign in — login runs through Google, there's no password anymore.
  • Source protection is limited: a Lua script loaded via loadstring in an executor has to arrive on the client to run at all. Any executor can, in principle, capture the code it runs — there's no 100% protection.
  • What actually helps: obfuscation (e.g. Luraph/Moonsec), the "protection snippet" above (detects known debug/dump functions and bails out), and short-lived session links instead of fixed filenames.
  • What does NOT exist: a trick that allows execution but makes reading completely impossible. Detection snippets are, at best, a hurdle — not a guarantee — and can be bypassed.