tzainten

— I like coding

United States flagUnited States
Home

Flux

(2026)

A code-injector for s&box that lets you inject code directly into a package.

LangC#Size~940 LOCLicenseMITSourceGitHub

Flux allows users to modify the source code of any game they play within the s&box platform. You get full support for type safety and intellisense.

This significantly reduced the friction I was experiencing when experimenting with BepInSbox and reflection.

An example mod that logs how many Physguns are in the scene.
Fig. 1An example mod that logs how many Physguns are in the scene.

Source Code Modification

Fig. 2Direct modification of the game’s source code — extremely powerful for exploiting vulnerabilities

As a developer, it can be a critical mistake to not consider what a modified client can do.

[Rpc.Host]
public void AddMoney( int amount )
{
    var newAmount = Cash + amount;
    UpdateCash( newAmount );
}

In the method above, Rpc.Host means this method will run on the host whenever a connection invokes it. There’s no safe-guards here at all; a modified client can tell the host to run this method at any moment to give themselves money to their heart’s desire.

Why I built it

I wanted an easy way for myself to crack my own games. Hardening your RPCs is great, but this tool allows you to iterate exploits and prove your own security quickly.

s&box has since moved away from shipping raw source code and now compiles games on their backend, completely killing this tool.

Home