Most trainers print to console. If you look back at the attacks you can see what all the hacker is accessing in terms of Injection Scripts.
Most ESX things are easily searchable so if you have something exploitable clientside
like jailing someone or fining them then they can just access that Handler and access things they shouldnt.
Try using something like this