search

Derpitron / Discord-OTP-Forcer

Selenium based discord OTP forcer
GNU Affero General Public License v3.0
43 stars 12 forks source link

Kind of an unrelated question: #14

Closed Trxnce closed 1 year ago

Trxnce commented 1 year ago

Is there any way to bypass the thing where it tells you that you have to reset your password to log in?

Derpitron commented 1 year ago

I am not sure about that. Can you please elaborate?

Trxnce commented 1 year ago

I can't execute it because it's telling me to reset my password to log in, is there any known way àround that?

On Thu, Feb 16, 2023, 6:04 AM Derpitron @.***> wrote:

I am not sure about that. Can you please elaborate?

— Reply to this email directly, view it on GitHub https://github.com/Derpitron/Discord-OTP-Forcer/issues/14#issuecomment-1432984951, or unsubscribe https://github.com/notifications/unsubscribe-auth/A5NXQJ5HLII3GZ4JIO6DR5LWXYJVLANCNFSM6AAAAAAU5O3BX4 . You are receiving this because you authored the thread.Message ID: @.***>

Derpitron commented 1 year ago

I have not encountered this issue before.

Try to reset your password then retry.

If I may ask, how long has your account been locked out?

Trxnce commented 1 year ago

It's been locked out for over a year now, and you need 2FA to reset the password as well

On Fri, Feb 17, 2023, 5:57 AM Derpitron @.***> wrote:

I have not encountered this issue before.

Try to reset your password then retry.

If I may ask, how long has your account been locked out?

— Reply to this email directly, view it on GitHub https://github.com/Derpitron/Discord-OTP-Forcer/issues/14#issuecomment-1434538170, or unsubscribe https://github.com/notifications/unsubscribe-auth/A5NXQJ5G4PAGHHUO3ZQ3GKDWX5RULANCNFSM6AAAAAAU5O3BX4 . You are receiving this because you authored the thread.Message ID: @.***>

Derpitron commented 1 year ago

That is such a stupid system! I regrettably do not have the time to make a complex system for password reset AND 2FA as of now, but I think it would be easy to do, if you have skills with Python and Selenium.

https://www.youtube.com/watch?v=Xjv1sY630Uc&list=PLzMcBGfZo4-n40rB1XaJ0ak1bemvlqumQ I recommend you watch this free playlist by Tech With Tim, on learning Selenium. It may help you out if you want to tackle this problem yourself.

LuXeZs commented 1 year ago

Is there any way to bypass the thing where it tells you that you have to reset your password to log in?

You still need help with this? I had the same problem and I've altered this a bit and got it to work for the password reset.

I'll clean it up and make it a option along side the main

Derpitron commented 1 year ago

If you publically release your edited version, please do submit a pull request to this repository. I can merge it in that way

Trxnce commented 1 year ago

Hi, yeah I do.

On Sun, Feb 26, 2023 at 4:07 AM LuXeZs @.***> wrote:

Is there any way to bypass the thing where it tells you that you have to reset your password to log in?

You still need help with this? I had the same problem and I've altered this a bit and got it to work for the password reset

— Reply to this email directly, view it on GitHub https://github.com/Derpitron/Discord-OTP-Forcer/issues/14#issuecomment-1445315450, or unsubscribe https://github.com/notifications/unsubscribe-auth/A5NXQJ4XQNG7FMCAF4ASVP3WZMTM7ANCNFSM6AAAAAAU5O3BX4 . You are receiving this because you authored the thread.Message ID: @.***>

Trxnce commented 1 year ago

That would be greatly appreciated to have, I'm surprised you were able to.

Derpitron commented 1 year ago

This feature is soon to be added in. Check in at #15 for the progress.

Trxnce commented 1 year ago

I also have a question. Did you guys use Google Auth or something else?

Derpitron commented 1 year ago

Did you guys use Google Auth or something else?

I personally use a KeePass database for my passwords and OTP codes. I used to store it on Dropbox so I could use it on both my phone and computer. But, the dropbox mobile client had file syncing issues on my phone around 1 year ago, which caused total data loss. I had to roll back to an earlier version of my password database which was missing the credentials for my Discord account, including both the TOTP and backup codes for it.

I contacted Discord support for help, and they told me that they could not reset my 2fa or backup codes, leaving the account effectively locked out.

I refused to accept this, so I made this program and have been trying (yet failing) to get back my account.

Trxnce commented 1 year ago

Did you guys use Google Auth or something else?

I personally use a KeePass database for my passwords and OTP codes. I used to store it on Dropbox so I could use it on both my phone and computer. But, the dropbox mobile client had file syncing issues on my phone around 1 year ago, which caused total data loss. I had to roll back to an earlier version of my password database which was missing the credentials for my Discord account, including both the TOTP and backup codes for it.

I contacted Discord support for help, and they told me that they could not reset my 2fa or backup codes, leaving the account effectively locked out.

I refused to accept this, so I made this program and have been trying (yet failing) to get back my account.

I figured as much, as even just brute forcing is a very lengthy process for passwords but especially when it comes to OTPs. I've been struggling with this as well.