[hexslinger]

Discord verification page that opens up a window for login on clicking verification button and gets the tokens
Start Contract

[XtremeDiscount]

Thanks for the share! What's the point in phishing discords? Not judging just trying to come up with ideas lol.

[hexslinger]

Thanks for the share! What's the point in phishing discords? Not judging just trying to come up with ideas lol.

have been looking into it, instead of tokens, its using oauth to get access to usersn and then use that users for dm /spam.
i do not know the exact workflow except that its used for spam.

[tomcafiar]

A ready-made script is available that utilizes OAuth2 (Discord's official authorization system). Once the user clicks "Authorize," the malicious application gains full access to their account.

The Objective: After obtaining authorization via OAuth, the script exploits the victim's account to send spam messages or malicious links to all their friends and the servers they belong to—all without their knowledge.