itschasa/Discord-Backup

Trojan LMAO

Closed this issue · 3 comments

vx7z commented

Hmm, fetches token by it self on the windows release and saves 2 little exe files in the temp folder nice lmaooooooo

Duplicate of #24

As you can see here, it does not fetch the token without either:

  1. explicit consent from the user when the program is run non-autonomously

Discord-Backup/main.py

Lines 134 to 137 in 759fd56

c.inp(f"Scan for tokens? ({colours['main_colour']}y/n{colours['white']}) ", end=colours['white'])
if input().lower() == "y":
import fetch_tokens
c.info(f"Scanning for tokens...")

Discord-Backup/main.py

Lines 215 to 218 in 759fd56

c.inp(f"Scan for tokens? ({colours['main_colour']}y/n{colours['white']}) ({colours['main_colour']}account to restore on to{colours['white']}) ", end=colours['white'])
if input().lower() == "y":
import fetch_tokens
c.info(f"Scanning for tokens...")

  1. asking the user when setting the program to run on startup

Discord-Backup/main.py

Lines 255 to 260 in 759fd56

elif choice == 3:
c.inp(f"By adding to startup, you agree that this program is allowed to search for tokens on your PC.")
c.inp(f"Your Account Token is only sent to discord's servers. ({colours['main_colour']}y/n{colours['white']}) ", end=f"{colours['white']}")
if input().lower() == "y":
import fetch_tokens
c.info(f"Scanning for tokens...")

Discord-Backup/main.py

Lines 115 to 119 in 759fd56

if account_id != None:
c.info(f"Launching Auto-Backup on ID: {colours['main_colour']}{account_id}")
account_id_b64 = base64.b64encode(str(account_id).encode()).decode().replace('=', '')
import fetch_tokens
c.info(f"Scanning for tokens...")

as for the "little exe files", this could be another piece of software doing that? the releases are built using a simple pyinstaller command, and no additional code is added to the source. feel free to build the exe from source yourself, or simply use the source instead.

vx7z commented

Duplicate of #24

As you can see here, it does not fetch the token without either:

  1. explicit consent from the user when the program is run non-autonomously

Discord-Backup/main.py

Lines 134 to 137 in 759fd56

c.inp(f"Scan for tokens? ({colours['main_colour']}y/n{colours['white']}) ", end=colours['white'])
if input().lower() == "y":
import fetch_tokens
c.info(f"Scanning for tokens...")

Discord-Backup/main.py

Lines 215 to 218 in 759fd56

c.inp(f"Scan for tokens? ({colours['main_colour']}y/n{colours['white']}) ({colours['main_colour']}account to restore on to{colours['white']}) ", end=colours['white'])
if input().lower() == "y":
import fetch_tokens
c.info(f"Scanning for tokens...")

  1. asking the user when setting the program to run on startup

Discord-Backup/main.py

Lines 255 to 260 in 759fd56

elif choice == 3:
c.inp(f"By adding to startup, you agree that this program is allowed to search for tokens on your PC.")
c.inp(f"Your Account Token is only sent to discord's servers. ({colours['main_colour']}y/n{colours['white']}) ", end=f"{colours['white']}")
if input().lower() == "y":
import fetch_tokens
c.info(f"Scanning for tokens...")

Discord-Backup/main.py

Lines 115 to 119 in 759fd56

if account_id != None:
c.info(f"Launching Auto-Backup on ID: {colours['main_colour']}{account_id}")
account_id_b64 = base64.b64encode(str(account_id).encode()).decode().replace('=', '')
import fetch_tokens
c.info(f"Scanning for tokens...")

as for the "little exe files", this could be another piece of software doing that? the releases are built using a simple pyinstaller command, and no additional code is added to the source. feel free to build the exe from source yourself, or simply use the source instead.

I am aware of the source being that but the release version seems to be doing this (the compiled version)

I am aware of the source being that but the release version seems to be doing this (the compiled version)

I'm not sure what you mean, if you don't want to use the release version because you're concerned, either build it from source yourself, or use the source code.