How to setup and use - Discord-OTP-Forcer/Discord-OTP-Forcer GitHub Wiki

[!NOTE] This wiki has been moved to a documentation website which should make it easier to follow. This wiki may not be as up to date or may even be removed at some point. It is recommended to go to the new site instead.

Video Walkthrough

Aglitar made this video tutorial on how to use it. You can follow this along if the instructions below don't help you https://www.youtube.com/watch?v=v4skgYVmvQg

Requirements

Windows

  1. Clone/download the repository.

    Or,

    • Clone with Git
      git clone https://codeberg.org/Discord-OTP-Forcer/Discord-OTP-Forcer.git

  2. Go to the location you installed the repository and run scripts/Windows/setup.cmd.

  3. The requisite dependencies will install. After installation, the config/account.yml and config/program.yml files will open. Fill out the necessary details, then save the files and close Notepad. If you are ready to start a forcer session now, type Y at the prompt. A new window will open starting a forcer session.

  4. If you chose 'No' to starting a forcer session on the setup script, when you are ready, run scripts/Windows/start.cmd and follow the instructions in the command prompt.

  5. An automated Google Chrome window will open. If and when the hCaptcha appears, complete it as normal.

  6. Wait for either a successful login, or a closed browser window (Failure to brute force codes). Go to the "Running the program" section for the main instructions.

macOS, Linux, other Non-Windows-based OS

  1. Clone/download the repository, and cd to it
git clone https://codeberg.org/Discord-OTP-Forcer/Discord-OTP-Forcer.git
cd Discord-OTP-Forcer
python -m venv .venv
# Replace the below step with however you activate a virtualenv in your OS: https://docs.python.org/3/library/venv.html#creating-virtual-environments
source .venv/bin/activate
  1. Install the requisite dependencies.
pip install -r dependencies.txt
  1. Fill in the files in the config folder as shown below:
  2. Fill out the necessary credentials in the config/account.yml file.
  3. Fill out the necessary program configuration options in config/program.yml file.

Running the program

  1. Run the main.py file.
python main.py
  1. An automated Google Chrome window will open. If and when the hCaptcha appears, complete it as normal.
  2. Wait for either a successful login, or a closed browser window (Failure to brute force codes)
  3. If it succeeds, The program will PRINT YOUR ACCOUNT TOKEN TO CONSOLE. Be warned and don't run this where someone else could access the log. It will also save it to a file in secret/token.txt.
  4. Do not log out of discord.com on that browser window at all. Even if the browser closes, that's fine. just do NOT log out under any circumstances or the token will be regenerated, making your currently obtained token invalid and the whole effort is lost.
  5. You can LOG IN to your account using that token with this script: https://github.com/JHVIW/Discord-Token-Login-Script. Go to discord.com/login, open browser console, paste the script, fill in your account token where it says to, and wait for it to log-in.
  6. As soon as it logs in, go to User Settings > My Account > Authenticator App > View Backup Codes. Click it and enter your password, or your newPassword if you were in Reset mode.
  7. It may ask you for an email verification code. Check your account's registered mail for this and enter it.
  8. You'll see your account's backup codes. SAVE THEM. SCREENSHOT THIS 15 TIMES AND SAVE 3 COPIES OF IT ON GOOGLE DRIVE, AND YOUR HARD DRIVE, YOUR PHONE, WRITTEN ON A PIECE OF PAPER, ETC.
  9. After having saved one of these backup codes, click Remove Authenticator App above and enter one of the backup codes you just obtained above.
  10. Now your account is liberated. Feel free to do whatever you want with it but remember to save all details you change.

Filling out the program.yml file

The program has two modes Reset and Login. You will need to set programMode to one of these.

  • programMode: Reset Will set the program to password reset mode. It'll log in to your account using the password reset token resetToken, enter your desired newPassword, and then Force codes.
  • programMode: Login Will set the program to login mode. This is a normal email+password login which will then (usually) ask you for a Captcha, then start Forcing codes.

After you've set the program's mode you'll need to chose what type of code you want the program to use, The program currently has 3 modes to choose from.

  • codeMode: Normal Generates a 6-digit numeric 'normal' code.
  • codeMode: Backup Generates an 8-digit alphanumeric 'backup' code.
  • codeMode: "aqzi[a-z0-9]{2}(p|q)[3-5]" This is the special regex mode, that gets filled into Backup codes. This generates a backup code conforming to your given regex template. In this case, it would possibly generate ANY of the following codes: aqzi03p4, aqzi8jq5, and even more! You can fill in any template you want, provided it fits within the Discord backup code format, which is [a-z0-9]{8}. Just type in the parts of the code you do remember, and fill in what you don't remember with some regex you think it adheres to (for a single character.

https://regex101.com/ This is a good website to check and test out regex patterns. Make sure to use the Python regex mode

There are a few other options in the program.yml file that control the program's timing and logging settings. They have default values and you may want to change them for your needs.

Filling out the account.yml file

Fill in your account's email ID, password in the email and password fields. Remember to put them in quotes. If you plan on using the Reset mode you'll need to fill out the newPassword and resetToken fields

How to get your token

  1. Go to https://discord.com/login and enter the email for the account and click forgot password.

plot

  1. Find the password reset email and click reset password.

plot

  1. Your token will be in the URL for the password reset page.

plot

[!NOTE] You only need the part after https://discord.com/reset#token= the program will not work if you put the entire URL.