search

TrashUwU / PokeAssistant

Amazing Free Pokétwo Assistant that identifies Pokémons from Pokétwo spawns, pings a role if a legendary spawns and pins them, pings you if your Shiny Hunt Pokémon spawns and other features like Quest Ping! Every features are automated.
2.53k stars 208 forks source link

token logger #37

Closed bmochan closed 1 year ago

bmochan commented 1 year ago

very very sketch

TrashUwU commented 1 year ago

Best way to overcome your sketch feeling is to create your bot using alt account and assigning non-admin permissions to it in your server.

bmochan commented 1 year ago

Best way to overcome your sketch feeling is to create your bot using alt account and assigning non-admin permissions to it in your server.

doesnt change the fact that this could be a potential token logger

TrashUwU commented 1 year ago

Prove it.

bmochan commented 1 year ago

Prove it.

can you prove that it isnt? deobfuscating ur code is a hassle in itself which i cba to undertake

Trickster85 commented 1 year ago

Can you prove that it is? You were the one to bring up this issue. Now you've to prove it. Debug/deobsfucate if you want.

On Fri, 7 Oct 2022, 10:38 am bmochan, @.***> wrote:

Prove it.

can you prove that it isnt? deobfuscating ur code is a hassle in itself which i cba to undertake

— Reply to this email directly, view it on GitHub https://github.com/TrashUwU/PokeAssistant/issues/37#issuecomment-1271100799, or unsubscribe https://github.com/notifications/unsubscribe-auth/AT7BS25LGZ3KSXJG6BEQQBTWB6SNLANCNFSM6AAAAAAQ2ZVWHA . You are receiving this because you are subscribed to this thread.Message ID: @.***>

Trickster85 commented 1 year ago

I've been using this for years now, it seems legit.

On Fri, 7 Oct 2022, 10:42 am Amio 9514, @.***> wrote:

Can you prove that it is? You were the one to bring up this issue. Now you've to prove it. Debug/deobsfucate if you want.

On Fri, 7 Oct 2022, 10:38 am bmochan, @.***> wrote:

Prove it.

can you prove that it isnt? deobfuscating ur code is a hassle in itself which i cba to undertake

— Reply to this email directly, view it on GitHub https://github.com/TrashUwU/PokeAssistant/issues/37#issuecomment-1271100799, or unsubscribe https://github.com/notifications/unsubscribe-auth/AT7BS25LGZ3KSXJG6BEQQBTWB6SNLANCNFSM6AAAAAAQ2ZVWHA . You are receiving this because you are subscribed to this thread.Message ID: @.***>

bmochan commented 1 year ago

keyword "seems". u urself cant be sure since its obfuscated

bmochan commented 1 year ago

Can you prove that it is? You were the one to bring up this issue. Now you've to prove it. Debug/deobsfucate if you want. … On Fri, 7 Oct 2022, 10:38 am bmochan, @.> wrote: Prove it. can you prove that it isnt? deobfuscating ur code is a hassle in itself which i cba to undertake — Reply to this email directly, view it on GitHub <#37 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AT7BS25LGZ3KSXJG6BEQQBTWB6SNLANCNFSM6AAAAAAQ2ZVWHA . You are receiving this because you are subscribed to this thread.Message ID: @.>

i dont have time to deobfuscate it. the fact that it only runs on replit isnt helping either. key takeaways are that it is a sketchy program that doesnt want u to know what its doing, hence the obfuscation.

TrashUwU commented 1 year ago

Can you prove that it is? You were the one to bring up this issue. Now you've to prove it. Debug/deobsfucate if you want. … On Fri, 7 Oct 2022, 10:38 am bmochan, @.**> wrote: Prove it. can you prove that it isnt? deobfuscating ur code is a hassle in itself which i cba to undertake — Reply to this email directly, view it on GitHub <#37 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AT7BS25LGZ3KSXJG6BEQQBTWB6SNLANCNFSM6AAAAAAQ2ZVWHA . You are receiving this because you are subscribed to this thread.Message ID: @.**>

i dont have time to deobfuscate it. the fact that it only runs on replit isnt helping either. key takeaways are that it is a sketchy program that doesnt want u to know what its doing, hence the obfuscation.

Obfuscation is also done when you don't want others to copy your code. But how can you be so sure it's a token grabber? You didn't even code it. You literally have no proof, if you don't want to use it then don't. I coded it so I can confidently say It's not a token grabber. Is there any better proof than this?

TrashUwU commented 1 year ago

And why would someone log bot tokens? What's the profit? Very sketchy, honestly I've no idea why would someone do that. You seem experienced with this stuff. Do you know why?

bmochan commented 1 year ago

Can you prove that it is? You were the one to bring up this issue. Now you've to prove it. Debug/deobsfucate if you want. … On Fri, 7 Oct 2022, 10:38 am bmochan, @.**> wrote: Prove it. can you prove that it isnt? deobfuscating ur code is a hassle in itself which i cba to undertake — Reply to this email directly, view it on GitHub <#37 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AT7BS25LGZ3KSXJG6BEQQBTWB6SNLANCNFSM6AAAAAAQ2ZVWHA . You are receiving this because you are subscribed to this thread.Message ID: @.**>

i dont have time to deobfuscate it. the fact that it only runs on replit isnt helping either. key takeaways are that it is a sketchy program that doesnt want u to know what its doing, hence the obfuscation.

Obfuscation is also done when you don't want others to copy your code. But how can you be so sure it's a token grabber? You didn't even code it. You literally have no proof, if you don't want to use it then don't. I coded it so I can confidently say It's not a token grabber. Is there any better proof than this?

i didnt code it but if i did, i would have open sourced it if i decided to upload it on github. why? because github is meant for open source projects. whats the point of obfuscating your code when you are going to upload it on github anyway? if you want to sell it, you might as well do it on ebay or sum shit. you can confidently say its not a token grabber because its not open source. better proof will be obtained if and ever you let any specialized individual to study your deobfuscated program

bmochan commented 1 year ago

And why would someone log bot tokens? What's the profit? Very sketchy, honestly I've no idea why would someone do that. You seem experienced with this stuff. Do you know why?

you really cant be that blind to make that comment, can you? whats the profit in demolishing a discord server with thousands of members? whats the profit in actively logging all the messages sent by users in a discord server? you get the point. for your other comment, theres a difference between experience and knowledge; i am knowledgeable in this regard because i am very well educated on it.

TrashUwU commented 1 year ago

Lol there's another obfuscated auto catcher program from HOPE-NEXUS on Github. What about that?

TrashUwU commented 1 year ago

Obfuscation is like anti-counterfeit thingy.

bmochan commented 1 year ago

Lol there's another obfuscated auto catcher program from HOPE-NEXUS on Github. What about that?

yeah ive looked into it. their code on github isnt obfuscated but many parts of it are missing. ive made an issue on their repository asking whether or not they give the full source code upon purchase and apparently they dont.

imo, that makes theirs worse than yours. genuine question though, what is the point of selling an exploit for a discord bot whose period of existence is ambiguous?

TrashUwU commented 1 year ago

These bots are so addicting that they'll have active users forever. (UNLESS DISCORD SHUTS DOWN OR ANOTHER POKEMON BOT TAKES THE THRONE. BUT THESE EXPLOITATION PROGRAMS CAN BE CODED TO WORK ON ALL POKEMON BOTS, so it's totally worth selling hacks.)