When you run loadstring(game:HttpGet("...")) , the script runs locally on your PC (via the exploit's interpreter). A bad actor can include code that:

: Historical and current scripts that run the underlying systems of the Roblox client.