Roblox Executors
Reference
Roblox Executors
Nine names, side by side. Almost nothing published about them holds up, and every name is claimed by four to twelve sites at once. Here is what we could verify.
What an executor does
A Roblox script is Lua code. It cannot do anything on its own. An executor is a separate application that attaches to your running Roblox client and runs that code inside it. Script in one hand, executor in the other, and nothing happens until both are present.
There is no place inside the Roblox app to paste a script. If you have been hunting for a text box in Roblox itself, that is why you never found one. New to all of this? Start with what a Roblox script is, then how to use one.
The nine names, side by side
These are the tools people search for most. The final column is the one worth staring at.
| Name | Platform | Cost | Key system | Source code | Sites claiming to be official |
|---|---|---|---|---|---|
| Delta | Android, iOS | Free, funded by key ads | Yes | None found | 12 |
| KRNL | Windows | Free | Yes, historically | None found | 9 |
| Fluxus | Android, Windows | Free | Yes | None found | 7 |
| Hydrogen | Android, macOS | Not confirmed | Not confirmed | None genuine | 7 |
| Arceus X | Android | Free, with a paid tier | Yes | Partly published | 6 |
| Wave | Windows | Paid | Claimed | None found | 6 |
| Solara | Windows | Free, claimed | Keyless, claimed | None found | 6 |
| Swift | Windows, mobile claimed | Free, claimed | Not confirmed | None genuine | 5 |
| Xeno | Windows | Free | Keyless | Was open, original now gone | 4, plus rotating copies |
Every name has its own page with the detail behind these rows. Nothing on those pages is padded out with figures we could not stand behind.
Where to download
Get Delta → Opens deltaexploits.gg in a new tab. External site, not run by us.Disclosure. Auto Farm Script has an affiliate arrangement with Delta and may earn a commission if you download through this button. It does not change what this page says, and it does not make the download any safer. We list a download only where there is a source we are willing to point at. Xeno is left off on purpose. The original is gone and a malware campaign is running under the name, so there is nothing here we would send you to.
Why this page has so many blanks
Most executor pages you will find are confident about everything. Version numbers, release dates, whether a tool is working today, whether it is safe. We went looking for the sources behind those claims and mostly found other pages making the same claims, published by sites that link to each other.
So the rule for this page and the nine pages under it is plain. If a fact came from a security company, from mainstream tech press, from Roblox, or from a code repository we could actually open, it is stated as fact. If it came only from a download page, it is marked as claimed or left blank. Blanks are honest. Filling them in with numbers copied off a download site would not be.
The impersonation problem
Search any of these nine names and you get a wall of results. Search Delta and you find twelve separate domains, most with the word official in the title tag. Search KRNL and you find nine. Not nine pages about KRNL, nine sites each presenting itself as the home of it.
Those sites are not independent. One of them publishes official pages for Xeno, Wave, Solara and Arceus X. Another publishes pages for Hydrogen and Wave. A third publishes Arceus X pages. They cite each other, which looks like corroboration and is not, because it is one network writing about itself.
The same thing happens on GitHub. Search for Xeno and four repositories come back with word for word identical descriptions, one star each, created within three weeks of one another this month under unrelated throwaway accounts. Three more that appeared in search results had already been deleted by the time we tried to open them. Hydrogen and Swift show the same pattern with their own sets of duplicate accounts.
This is the single most useful thing to know before you download anything. Getting the product name right is not the same as getting the source right.
The Xeno malware campaign
This is not a general warning. It is a specific, documented campaign that was running as this page was written.
Bitdefender has tracked an operation targeting Roblox players since the start of 2026, which climbed sharply in March. BleepingComputer reported on it in August 2026. Attackers push fake Xeno installers advertised as undetected builds, spread through gaming forums, Discord servers, and accounts that have been compromised or copied to look like someone you trust.
The packages look convincing. Proper folder structure, real Lua scripts sitting inside. What arrives with them is a Java remote access trojan and information stealer. Published capabilities include lifting saved data from Chrome, Edge, Brave, Opera and Vivaldi, taking Discord, Roblox, Minecraft and Microsoft Store accounts, pulling cryptocurrency wallet files, logging keystrokes, capturing the screen, and handing the attacker a remote shell on the machine.
Why version numbers on these sites mean nothing
Download pages love a version number. It signals freshness and it makes a page look maintained. Then you notice something odd about which numbers appear where.
Delta is listed as v2.733 on one set of sites. KRNL is listed as v2.733 on another. Hydrogen turns up as v2.731, Solara as v2.708. Four different products, allegedly built by four unrelated teams, landing on numbers a few digits apart in the same range.
Those are not release versions. They are template fields, generated by whatever system produces these pages, refreshed on a schedule so the content looks current. Treat any version string you see on a download page as decoration.
Checking a source yourself
Nobody can hand you a safe link, and this page is not going to pretend otherwise. What you can do is test a source before you trust it.
- Count the competitors. Search the name and look at how many results claim to be official. If it is eight, at least seven are lying, and possibly all eight.
- Look for history. A real project has a past. Commits going back months, issues with actual conversation in them, a community that has been in one place for a while. A repository created three weeks ago with one star and a copied description is not a project.
- Watch what the installer asks for. No executor needs your Roblox login, your email address, a payment method, or a browser extension. A request for any of those tells you what the software is really for.
- Treat verification gates as advertising. Human verification steps, survey walls and app install offers are there to make money. None of them check anything.
- Be most careful where it feels most personal. Discord messages and video descriptions are the main delivery route in the campaign above, because a link from a person feels safer than a link from a website. It is not.
FAQs
Where to go next
Scripts are the part of this we can actually vouch for, because you can read them before you run them.