Exploiters scan games for RemoteEvent or RemoteFunction objects that have loose server-side security. If a developer writes a script like this:
So, how do these scripts exist? Most "FE Kick/Ban GUIs" work only if the game developer has made a critical mistake: Backdoored Remote Events . - FE - Kick Ban Player Gui Script-
The server receives the command, blindly trusts it, and kicks the victim. This is how "FE Admin GUIs" work in games that aren't secured. In very rare cases, exploiters can utilize glitches related to network ownership or server lag to force players to leave, though Roblox has blindly trusts it