[WIP] find sandbox escapes

[Copilot]

Finding Sandbox Escapes in OpenSB

Based on my analysis of the OpenSB repository, I'm creating a comprehensive plan to identify and fix potential sandbox escape vulnerabilities in this Roblox script builder.

Analysis Summary

OpenSB is a Roblox script builder with a sophisticated sandbox system located in /modules/server/wm/sandbox/. The sandbox includes:

• Environment isolation (environment.luau)
• Object wrapping system (wrapper/)
• Security rules (rules.luau)
• Instance blocking (blockedInstances/)
• Stack safety checks

Potential Escape Vectors Identified

High Priority:

• Stack traversal bypasses - seekSafeLevel and isStackSafe functions could have logic errors
• getfenv/setfenv exploits - Environment manipulation functions are complex and error-prone
• Wrapper system bypasses - Ways to obtain unwrapped references to bypass security
• Debug library abuse - Limited but still exposed debug functions
• Coroutine/thread escapes - Thread management and coroutine handling vulnerabilities

Medium Priority:

• Metatable manipulation - Bypassing metatable protections
• Instance creation bypasses - Circumventing blocked instance restrictions
• Environment pollution - Contaminating shared environments
• Reference leakage - Obtaining references to protected objects

Low Priority:

• Error handling bypasses - Using error messages to leak information
• String/table manipulation - Using library functions to escape
• Timing attacks - Using performance characteristics to infer information

Implementation Plan

• Create comprehensive test suite for all identified vectors
• Fix critical stack safety vulnerabilities
• Patch getfenv/setfenv security holes
• Strengthen wrapper system integrity
• Validate debug library safety
• Test and validate all fixes
• Document security improvements

Next Steps

1. Build test suite to reproduce escape vectors
2. Implement minimal targeted fixes
3. Validate fixes don't break existing functionality

---

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.

[techs-sus]

why does clicking that button in github's ui auto create a pull request???

alot of what it said is true though

[ewd3v]

💀