BloxFinder - Join Anyone & Export Clothing

Extension Purpose and Intention

BloxFinder is a Chrome extension designed to enhance the Roblox gaming experience by allowing users to join any player's game server, even if the player has restricted access. Additionally, it provides functionality to download clothing textures from Roblox.

Code Functionality

1. Game Joining Functionality

   • The extension uses a function func to join a Roblox game instance by calling window.Roblox.GameLauncher.joinGameInstance with serialized game place and ID.
   • Code Snippet:

     const func = (place, id) => {
         const serializedPlace = JSON.stringify(place);
         const serializedId = JSON.stringify(id);
     
         window.Roblox.GameLauncher.joinGameInstance(JSON.parse(serializedPlace), JSON.parse(serializedId));
     };
     

2. Storage Initialization

   • On installation, the extension sets several local storage values to configure its behavior, such as showing warnings, playing music, and setting intervals for cooldown and requests.
   • Code Snippet:

     chrome.runtime.onInstalled.addListener(() => {
         chrome.storage.local.set({"showWarning": "Yes"})
         chrome.storage.local.set({"showPercentChance": "Yes"})
         chrome.storage.local.set({"totalServers": "Yes"})
         chrome.storage.local.set({"playMusic": "Yes"})
         chrome.storage.local.set({"showConfetti": "Yes"})
         chrome.storage.local.set({"cooldownInterval": 30})
         chrome.storage.local.set({"getRequestInterval": 5})
         chrome.storage.local.set({"totalSearches": 0})
         chrome.storage.local.set({"totalFinds": 0})
     });
     

3. Message Listener for Script Execution

   • The extension listens for messages containing place and id strings, and executes the func script in the context of the specified tab.
   • Code Snippet:

     chrome.runtime.onMessage.addListener(({ message }, { tab }) => {
         if (typeof message.place === 'string' && typeof message.id === 'string') {
             chrome.scripting.executeScript({
                 target: { tabId: tab.id },
                 func,
                 args: [message.place, message.id],
                 world: 'MAIN',
             });
         }
     });
     

Network and API Calls

• The extension interacts with the Roblox API to join game instances.
• No external network communications or API calls are observed beyond the Roblox platform.

Filesystem and Process Execution

• The extension does not perform any filesystem operations or execute external processes.

Obfuscation and Backdoors

• The code is straightforward with no signs of obfuscation or hidden backdoors.

Data Exfiltration

• There is no indication of data being collected or sent to external servers.

Conclusion

The extension appears to function as described, facilitating game joining and texture downloading without any evident malicious behavior.