Docs.SH
Loader Flow
How the Sorrel Hub loader delivers scripts and validates access.
2 min read
Loader Flow
The loader is the system that gets the script from Sorrel Hub's backend to your client. Understanding how it works helps you know what's expected when you run a product.
What Happens When You Load a Script
- You execute the loader stub — a short Lua/Luau snippet that identifies your account and initiates the request.
- The backend receives the request — it checks your account, subscription, Sub ID, and HWID against the database.
- Validation passes or fails — if everything checks out, the actual script is returned. If anything is wrong, the loader returns nothing and optionally shows an error.
- The script runs — only after successful validation is the payload delivered and executed.
This entire flow happens on the backend. The loader stub itself contains no script logic — it's just a handshake.
What Can Cause a Loader Failure
- Account is banned or suspended.
- Subscription for the product is expired or not found.
- Sub ID does not match your account.
- HWID does not match the one bound to your account.
- Your session token is invalid or already consumed.
- Backend is temporarily unavailable — in this case, access is denied (not bypassed).
Sub ID
Your Sub ID is generated when you get access to a product. It is visible in your account dashboard. If you think your Sub ID was leaked, you can rotate it from the dashboard — the old one immediately stops working.
Products With Loader Access
Currently, the following products use the loader system:
| Product | Loader |
|---|---|
| WinWare | /loader/winware.lua |
| LoveyWare | /loader/loveyware.lua |
| TargetWare | /loader/targetware.lua |
You get the stub from your account dashboard after getting access to a product.
Free Key Flow
Some products support a free key system. The flow involves completing a verification step (similar to a link shortener bypass), after which a key is generated and applied to your account automatically.
The key is tied to your account — it cannot be shared or used on a different account.