[0xLainRain]

[0X00] INTRODUCTION [0x00]

WELCOME 

I am 0xLainRain, and I have discovered a vulnerability/loophole inside of discord's security that can be easily bypassed.

You might want to send a file to your friend, or an image and what not. But discord keeps on flagging it as follows:

I have found a vulnerability inside of discord that uses steganography to bypass this, and I have also written the exploit to do so below everything.

[0X01] Here is an explanation of the vulnerability [0X01]

"Discord uses auto-mod to scan for explicit images (scans the image) and other algorithms to detect malicious files"

The fact it "scans" an image for explicit/malicious content and looks at the filetype (E.g: Jpeg, Mp4, Exe)

The exploitation part? That's simple.

[0X02] The logic behind the exploitation [0X02]

1 - We need 3 different things to make this work

X = File to Transfer.

Y = Carrier.

Z = Extractor.

X - The File we want to hide from any format.

Y - The Carrier does the following:
> Generates a fake EXE that is used to hide (Carry) the wanted file inside.

> The carrier has the ability to change it's Size to what the user wants: Kb, Mb, Gb and etc.

> The carrier gives the ability to switch the Extension of the EXE to anything while maintaining the fact it's an EXE (E.g: LainWasHere.carry)

Z- The Extractor does the following:

> Extracts the original file through the EXE Giving you the original file hidden inside

[0X03] WHAT THIS CAN BE USED FOR [0X03]

1- Sending files you want ONLY the other person to decrypt (Others would have no idea)

2 - Sending files in a server where certain things cant be sent (Because of server settings and you want to post something)

3 - Send anything without having to worry about being Reported or banned for anything

4 - Send/Recieve your Scripts/Programs to friends without having to worry about discord flagging it

5 - Secure method of data/information exchange inside of discord without having to worry about anything

6 - Legit a workaround over discords annoying Security Detection system.

[0X04] THE SUMMARY [0x04]

Discords detection system is heavily blind, in a way that malicious actors can use these weak spots against discord itself.

Discord barely even bothers with steganography attacks allowing virtually anyone to upload *ANYTHING* on their site.

Allowing people with the mutual exploit to exchange information without worrying about anything.

^ALWAYS HIDING IN PLAIN SIGHT ^

DOWNLOAD FROM BELOW:

Hidden Content

[hide]https://mega.nz/folder/WO4GhSKK#E58LhxTeHMxKpBf9K8oQ_w[/hide]

Thx for reading.

VULNERABILITY FOUND AND EXPLOITED BY 0XLAINRAIN