Exploit Discord's cache system to remote upload payloads on Discord users machines

Last update: Dec 20, 2022

Overview

Exploit Discord's cache system to hide payloads PoC

Remote upload embedded payload from image using EOF to Discord users machines through cache.

Depending on how NodeJS and Discord's cache system works, you could potentially make this a full remote code execution exploit.

Step-by-step

Step 1

Embed payload to an image that's less than 256 kb of size: python3 embed.py <image> <python payload>

For this proof-of-concept, my payload is:

print('Hello World!')

Step 2

Upload the image with the embedded payload to a Discord server as an emoji.

Step 3

Send the emoji in a text channel. Any member that displays that emoji will automatically download it with the embedded payload to cache.

Step 4

To actually execute the embedded payload, you'd have to make victim run a script like victim.py. The script will find and execute the embedded payload from the image in cache.

Video showcase

Note

The same trick can be done with profile avatars.

Credits

cs:

Have fun triggering AVs :p

Comments

fixed your readme and removed extraneous steps

Turns out steps 1-3 were completely unnecessary. If you already have the ability to run scripts on someone's computer then what exactly does this trick gain you? Nothing.

opened by ElijahMason 12
Useless

If you need the victim to run the victim.py you can easily skip the image part and just execute any code in victim.py, rendering the "image cache exploit" useless

opened by SamuelScheit 11
Error with executing victim.py

Hello, today I wanted to test the exploit out. I did everything as said in tutorial, but after launching victim.py i got this error:

File "victim.py", line 19, in exec(payload) ValueError: source code string cannot contain null bytes

it would be very good if anyone could help, thanks for anything.

opened by Shlauf 2
Not adding payload to cache

This is a really cool and clever idea but sadly even when I test on the Discord app it simply doesn't add the image to the cache. I tried setting my pfp to the image, just plain sent the image, and sent the image as a emoji. And still when I run victim.py it returns absolutely nothing.

opened by TheonlyIcebear 1
No comprende mi amigo

I may be a retard but I would like to ask is victim the payload I'm supposed to embed or am supposed to have my own payload then get someone to on their own run victim if so I don't understand why this would be effective in getting peoples av to flag but i believe I saw a video on this just recently and they were flagging peoples av just by posting the image.

but over all great post

opened by introspektion 1

Owner

cs

GitHub

A Redis cache backend for django

Redis Django Cache Backend A Redis cache backend for Django Docs can be found at http://django-redis-cache.readthedocs.org/en/latest/. Changelog 3.0.0

1k Dec 15, 2022

A slick ORM cache with automatic granular event-driven invalidation.

Cacheops A slick app that supports automatic or manual queryset caching and automatic granular event-driven invalidation. It uses redis as backend for

1.7k Jan 3, 2023

Redia Cache implementation in django.

django-redis Recipe APP Simple Recipe app which shows different kinds off recipe to the user. Why Cache ? Accessing data from cache is much faster tha

1 Sep 21, 2022

Django-Audiofield is a simple app that allows Audio files upload, management and conversion to different audio format (mp3, wav & ogg), which also makes it easy to play audio files into your Django application.

Django-Audiofield Description: Django Audio Management Tools Maintainer: Areski Contributors: list of contributors Django-Audiofield is a simple app t

167 Nov 10, 2022

Website desenvolvido em Django para gerenciamento e upload de arquivos (.pdf).

Website para Gerenciamento de Arquivos Features Esta é uma aplicação full stack web construída para desenvolver habilidades com o framework Django. O

8 Sep 22, 2022

Generate generic activity streams from the actions on your site. Users can follow any actors' activities for personalized streams.

Django Activity Stream What is Django Activity Stream? Django Activity Stream is a way of creating activities generated by the actions on your site. I

2.1k Dec 29, 2022

With Django Hijack, admins can log in and work on behalf of other users without having to know their credentials.

Django Hijack With Django Hijack, admins can log in and work on behalf of other users without having to know their credentials. Docs 3.x docs are avai

1.2k Jan 5, 2023

Notes-Django: an advanced project to save notes in Django. where users are able to Create, Read, Update and Delete their notes.

An advanced software to keep you notes. It allows users to perform CRUD operations on theirs Notes. Was implemented Authorization and Authentication

1 Feb 5, 2022

Django-discord-bot - Framework for creating Discord bots using Django

django-discord-bot Framework for creating Discord bots using Django Uses ASGI fo

1 Mar 4, 2022

System checks for your project's environment.

django-version-checks System checks for your project's environment. Requirements Python 3.6 to 3.9 supported. Django 2.2 to 3.2 supported. Are your te

33 Dec 22, 2022

A generic system for filtering Django QuerySets based on user selections

Django Filter Django-filter is a reusable Django application allowing users to declaratively add dynamic QuerySet filtering from URL parameters. Full

3.9k Jan 3, 2023

A Django based shop system

django-SHOP Django-SHOP aims to be a the easy, fun and fast e-commerce counterpart to django-CMS. Here you can find the full documentation for django-

2.9k Dec 30, 2022

Login System Django

Login-System-Django Login System Using Django Tech Used Django Python Html Run Locally Clone project git clone https://link-to-project Get project for

6 Dec 12, 2021

A Blog Management System Built with django

Blog Management System Backend use: Django Features Enhanced Ui

1 Dec 6, 2021

AUES Student Management System Developed for laboratory works №9 Purpose using Python (Django).

AUES Student Management System (L M S ) AUES Student Management System Developed for laboratory works №9 Purpose using Python (Django). I've created t

2 Dec 6, 2021

Cached file system for online resources in Python

Minato Cache & file system for online resources in Python Features Minato enables you to: Download & cache online recsources minato supports the follo

10 Jan 4, 2023

A task management system created using Django 4.0 and Python 3.8 for a hackathon.

Task Management System A task management app for Projects created using Django v4.0 and Python 3.8 for educational purpose. This project was created d

1 Dec 12, 2021

This repository contains django library management system project.

Library Management System Django ** INSTALLATION** First of all install python on your system. Then run pip install -r requirements.txt to required se

1 Dec 26, 2022

Djang Referral System

5 Oct 25, 2022