Discord-OTP-Forcer

This is a Selenium and Python based Discord TOTP forcer. It attempts to brute force randomly generated 6 or 8 digit codes with a random delay between each attempt. Look at him go!

Instructions on how to setup and use this program can be found on the wiki

Features

• Brute forces 6 digit TOTP codes (1 million possible codes)
• Brute forces 8 digit Backup codes (2.82 trillion possible codes)
• Ratelimit avoidance (Cooldown between every code attempt)
• Robust easy to read log formatting
• Can brute force Password Reset page's TOTP codes.
• Waits for you to complete the hCaptcha
• Automatically closes when the hCaptcha ticket or browser session expires, and prints useful info (e.g No. of attempted codes, time taken, no. of ratelimits)
• Blocks analytics URLs such as Cloudflare logging, Discord Science, and Sentry.io
• User friendly

Dependencies

• Google Chrome
• Python >= 3.10

Why did I make this?

In December 2021, I lost access to my passwords and OTP list due to a file syncing issue. I was able to recover most of the credentials, except for my Discord Alt. When I contacted Discord Support, they informed me that due to their security policy, they could not disable 2FA for that account, which while it is understandable, is unfortunate. As a proof-of-concept program, I hacked together this crude script which simply brute forces randomly generated 6 digit numbers to the Discord login's TOTP field.

Known Issues

• Depends on HTML element class names in order to detect failure/success
• Script relies on the Chrome WebDriver, thus Google Chrome will have to be installed.
• Requires Python Version >= 3.10 to work.

Credits

• SpaghettDev for their frick-discord-2fa script, which gave me the base for the codegen.py and textcolor.py libraries ❤️
• LuXeZs for implementing 8-char Backup OTP code brute-forcing, Password Reset OTP forcing, various bug fixes, and maintaining this program for now ❤️

Disclaimer

Copyright (C) Derpitron 2023
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License
along with this program.  If not, see <https://www.gnu.org/licenses/>.

Tldr; I am not responsible for anything you do with this script, and I do not condone (but cannot prevent) the usage of this script to hack into accounts which you do not properly own. The onus is on you to not be evil. Read the License for full information on your rights and responsibilities which pertain to this program.