Codex Executor — Status, sUNC and What It Actually Is

Overview

Codex is one of the few executors that runs on both Android and iOS, which makes it a common entry point for mobile Roblox scripting. It is free and uses a key system to gate access. ScriptBlox currently lists Codex at 96% sUNC with a key system.

RageInject does not host the Codex binary and cannot verify what any given build contains. What we can do is document the observable facts and the security environment every Roblox executor operates in.

Observable Facts

Android	Supported (APK install)
iOS	Supported (sideload or AltStore recommended)
Price	Free with key system
Status	Active per ScriptBlox
sUNC	96% on ScriptBlox
Source	scriptblox.com/executors

What Codex Is

Codex is a script executor. A script executor is third-party software designed to execute Lua or Luau scripts with the Roblox client. Roblox itself uses Luau, a scripting language derived from Lua, for developing experiences. Script executors are commonly associated with modifying gameplay, automation and exploits.

This is not the same as Roblox Studio, which is Roblox's official development environment where creators write Luau code to build games legitimately.

Ban Risk

Roblox prohibits cheating and exploiting. The company states that exploiting or cheating violates its Terms of Use and can result in account deletion. That applies whether the executor is free or paid, closed source or open source, distributed through a store or sideloaded.

Roblox's Hyperion anti-tamper system detects executors through integrity checks and memory monitoring. An Active status on a third-party tracker does not mean the executor is undetectable by Roblox — it means the tracker considers it functional.

Malware Risk

Mobile APKs and sideloaded IPA files are a common target for malware delivery. Security researchers documented a 2026 campaign that disguised a remote access trojan as Xeno Executor on Windows. Android has its own history of fake executor APKs that install infostealers, subscribe users to premium SMS services, or abuse accessibility permissions. iOS sideloading tools that ask for Apple ID credentials are a well-known phishing vector.

Codex, like every mobile executor, is distributed outside official app stores. Google Play Protect and Apple's App Store review cannot scan it.

File Integrity

Every file distributed on RageInject carries a published SHA-256 hash. For third-party executables we do not host, use the hash below as a comparison reference if the vendor publishes one. If your downloaded file does not match, do not run it.

# Windows (for emulator or sideloading workflows)
certutil -hashfile Codex.apk SHA256

# macOS or Linux
shasum -a 256 Codex.apk

Related Executors

Frequently Asked Questions