Awesome

📸 Discord Image Exploit

A phishing trick I found in discord. Working as of now.
Join the discord and create a ticket if you wan't help with a bug: https://discord.gg/wbh8eFGKAm You can message me at: Ice Bear#0167 Consider donating please as I make all my tools free https://www.roblox.com/game-pass/20395764/Donate

📝 Explanation

The program simply detects when discord is sending a get request for a preview of the website based off the ip address and will send a fake image. But when a actual user clicks the link it will detect that and send a malicious file instead causing the file to be downloaded. But in no way does the program actually execute the executable. This simply a showcase for the Logger and not very practical for actual hacking.

⚙ Usage

The image variable needs to be replaced with a link to a image example: https://cdn.discordapp.com/attachments/924433694133993482/938260977164632094/s.png.

While the malicious variable needs to be replaced with a download link to the file. example: https://cdn.discordapp.com/attachments/924433694133993482/938262761337671741/bad.exe

Finally, make sure to replace the redirect variable with your final redirect, such as the original image

Send the site link on discord and it'll turn into a image. Whenever someone clicks the image and hits "Open Origanal", right clicks the image and presses open link, or just click the image with their middle mouse button the file malicious file will download. Although it won't execute as I said before

If you want to host your website globally i'd recommend using replit (https://replit.com)

⚠ Warning

Although the hacking community in general are pretty chill people there are a lot of bad actors on discord who sell fake things to try and scam people interested in hacking. People will sell things like fake "One Click" exploits for like 150 dollars. Don't fall victim to these please. I came up with the project idea after seeing tons of fake "One Click Image Loggers" being sold. Unless someone can prove me wrong pretty sure this is the closest we'll get to a "image logger" on discord