Your Code. Protected.
10 Layer Lua Obfuscation Built for FiveM
Negligible Performance Impact • Full Framework Compatibility
Disclaimer: Kryphos is a private obfuscation service. We fully respect CFX rules for their official marketplace listings (those must use CFX Asset Escrow). You can still obfuscate that same script. Just don't upload the obfuscated version to the CFX marketplace. All private sales, direct Tebex stores, Discord, GitHub, and self hosted resources are fully supported.
Two Different Problems. Two Different Solutions.
Understanding the difference between distribution control and code protection
CFX Escrow
Controls who can download your script from the CFX forum. It's a distribution lock for forum releases, great for controlling access on the official CFX marketplace. But once someone has the file through any other channel, the source code is readable.
Kryphos
Makes the code itself extremely difficult to read and reverse engineer, no matter how someone got the file. All of your source code and every variable, string, and logic path is heavily scrambled. Dump it, leak it, access it any way they still can't see anything useful to steal or exploit.
Escrow protects your CFX releases. Kryphos protects everything else. Private scripts, Tebex sales, server side resources, and your whole source code.
Note: Kryphos protected scripts can be sold on any platform. Tebex, GitHub, Discord, your own store, and more. The only exception is CFX's official forum marketplace, which requires their own Asset Escrow system for listed releases.
Disclaimer: Kryphos is a private obfuscation service. We fully respect CFX rules for their official marketplace listings (those must use CFX Asset Escrow). You can still obfuscate that same script. Just don't upload the obfuscated version to the CFX marketplace. All private sales, direct Tebex stores, Discord, GitHub, and self hosted resources are fully supported.
One Dump Can Cost You Everything
Without Kryphos
With Kryphos
10 Compounding Layers of Protection
Each layer makes all previous layers exponentially harder to reverse
String Encryption + Runtime Decryptor
All strings XOR-encrypted with per-string keys. Only decrypted at runtime — static analysis sees nothing.
Identifier Renaming (_0xHEX)
Every variable, function, and parameter is renamed to unreadable hex identifiers.
Constant Obfuscation
Numeric and boolean constants are replaced with complex computed expressions.
Dead Code Injection
Fake functions, decoy variables, and junk logic paths injected throughout to waste reverse engineers' time.
Control Flow Flattening
Program logic is restructured into a state machine, destroying readable flow.
Opaque Predicates
Always-true/false conditions that appear complex, blocking decompilation.
Comment & Whitespace Stripping
All comments, formatting, and whitespace are removed completely.
Anti-Debug Hooks
Runtime timing checks and environment validation. Detects debugging tools and silently corrupts output.
Anti-Decompiler Traps
Specially crafted constructs that crash or confuse common Lua decompilers.
String Splitting
Strings are split into fragments and reassembled at runtime across multiple functions.
200+ FiveM natives & framework globals 100% preserved • ASCII-safe • Zero runtime errors
The Proof
Same functionality. Completely unreadable. Runs identically on any FiveM server.
Config.Locations = { { coords = vector4(-1172.8505, -1569.1763,📍 Exact dealer GPS coords exposed 4.3917, 300.2798), blip = { sprite = 524, color = 1, scale = 0.7, label = "Black Market" } }, { coords = vector4(1240.1276, -3168.0750,📍 Second location leaked 7.1049, 274.8748), blip = { sprite = 524, color = 1, scale = 0.7, label = "Black Market" } }, { coords = vector4(726.5413, 4169.9854,📍 Third location leaked 40.7092, 354.4087), }}Config.Items = { { label = "Pistol", item = "WEAPON_PISTOL",🔫 Weapon hash + price visible price = 500, }, { label = "Knife", item = "WEAPON_KNIFE", price = 2000, },}-- Server callback any modder can trigger directly:ESX.TriggerServerCallback( resourceName..':buyItem',⚠️ Server callback exposed — trigger remotely for free weapons function(success, reason) HandlePurchaseResult(success, reason, item) end, item.item, item.price, item.metadata or {})local _0x10b7 = 0local _0xc684 = GetCurrentResourceName()local _0xd8e8 = trueRegisterNetEvent(_0xc684..__d({203,178,254,251,100,187,167,200,211,4,241,192,136,252,41},2))local _0x5de4=2772if (math.floor(4120)==4120) thenAddEventHandler(_0xc684..__d({203,178,254,251,100,187,167,200,211,4,241,192,136,252,41},2), function()elselocal _0xdb905=5;for _0xi=1,5 do _0xdb905=_0xdb905+_0xi endend if Bridge.Framework == __d({149,131,239},3) thenif ((2242+0)==2242) then ESX = exports[__d({146,132,207,253,121,162,130,210,208,10,246},4)]:getSharedObject()elselocal _0xdb59d=6;for _0xi=1,6 do _0xdb59d=_0xdb59d+_0xi endendif ((4451+0)==4451) then Bridge.FrameworkObject = ESXelselocal _0xdba22=8;for _0xi=1,8 do _0xdba22=_0xdba22+_0xi endendEvery coordinate obfuscated • Every weapon hash hidden • Every callback name scrambled
Real scripts. Real protection. Every coordinate, event name, weapon hash, and money function. Completely hidden.
How It Works
From upload to protected in under two hours
Open a Ticket
Join my Discord and open a ticket. Upload your Lua scripts as a ZIP file.
Choose Your Level
Select Level 1, 2, or 3 based on how much protection you need.
I Process It
My engine detects frameworks, natives, and globals automatically. Then all protection layers are applied.
Get Your Protected Files
Receive your obfuscated scripts within 30-120 minutes, tested and ready to drop in.
Drop Into Your Server
Replace your original files. Works perfectly with zero configuration changes.
Simple, Transparent Pricing
Choose the protection level that matches your security needs
- String Encryption + Runtime Decryptor
- Identifier Renaming (_0xHEX)
- Constant Obfuscation
- Dead Code Injection
- Full framework compatibility
- ~30 minute turnaround
- Everything in Level 1
- Control Flow Flattening
- Opaque Predicates
- Comment & Whitespace Stripping
- String Splitting
- Anti-Debug Hooks
- ~60 minute turnaround
- Everything in Level 2
- Anti-Decompiler Traps
- Maximum entropy output
- Hardest possible reversal difficulty
- Priority processing
- ~90 minute turnaround
Monthly Retainer
Up to 20 scripts per month at Level 2. Priority processing. Perfect for active developers and server owners with ongoing protection needs.
Disclaimer: Kryphos is a private obfuscation service. We fully respect CFX rules for their official marketplace listings (those must use CFX Asset Escrow). You can still obfuscate that same script. Just don't upload the obfuscated version to the CFX marketplace. All private sales, direct Tebex stores, Discord, GitHub, and self hosted resources are fully supported.
Your Code, Your Property
Strict Confidentiality
All submitted code is handled under strict confidentiality. I never share, store, or reuse any client’s code.
Source Files Deleted
I delete all of your original source files after protecting and delivering them. Nothing lingers on my systems.
You Own Everything
You retain 100% ownership of your original code and the obfuscated output. I claim no rights to your work.
Fast Turnaround
Most scripts processed within 30-60 minutes. Monthly retainer clients get priority sub-30-minute processing.
Earn While You Share
Know someone who needs their scripts protected? Get rewarded for every client you send my way.
Share Your Link
Get your unique referral link from your Discord ticket. Share it with other developers.
They Get Protected
When someone opens a ticket and mentions your name or uses your link, the referral is tracked.
You Get Paid
Earn 15% commission on their first paid order from your referral. Paid out after the order is delivered.
No cap on earnings. No expiration. The more developers you refer, the more you earn. Open a ticket to get your referral link.
Frequently Asked Questions
Ready to protect what you built?
Your code is your investment. Stop giving it away for free.