"Breaking Open" A Discord Nitro Generator

[@D0Samp]

The best part is that even if they had rolled a valid gift code by dumb luck, it wouldn't have detected it. There's a typo in the API call ("entitelemnts" instead of "entitlements") which will always return a 404.

[@alex59292]

fr but also ntts could of just used run function on code and print the run function to get code source

[@electra_]

@@alex59292 might be a bad idea since it could be malware of some kind

[@alex59292]

@@electra_ hes using repl so who cares

[@LiEnby]

@@alex59292 protip; replace 'exec' with 'print' lol

[@alex59292]

@@LiEnby print boring

[@xapnaxx]

imagine buying nitro and it gets claimed by a random person you dont even know 😂

[@wy477x]

that actually happened with a steam gift card i got for christmas one time and it sucks

[@panshul520]

The only giveaway I won was of discord Nitro and just that happened

[@imnotmarbin]

It's virtually impossible for that to happen, sure there's an infinitesimal probability, but it's not going to happen.

[@fog-]

@@imnotmarbin it must have happened before, lots though, if you managed to generate a nitro gift lift, there was an author who bought the gift lol

[@awesomeman6948]

@@imnotmarbin it was a joke you smellfungus

[@dolfies]

The funniest thing is that there's a typo in the API endpoint, meaning it would never recognize it even if you do manage to generate a valid code.

[@justnathan_4087]

didn't even notice LOL

[@oclxtch9376]

whats the typo?

[@andrew3606]

@@oclxtch9376 "entitelemnts"

[@okRoadToSubs]

@@andrew3606 the coder misspelled entitlements lmao

[@Theunicorn2012]

The funniest thing is that there's a typo in the API endpoint, meaning it would never recognize it even if you fo manage to generate a valid code.

[@cirkulx]

So technically, they are just using kids to make free gift links by making them host it. What a genius plan. Edit 30/12/22: While executed poorly.

[@edmarcthegreat]

child labour

[@cirkulx]

@@edmarcthegreat free nitro child labour

[@nachooTM]

@@edmarcthegreat best invention

[@ligmaballs1953]

@@nachooTM lol

[@spocite]

@@edmarcthegreatbest invention since sliced bread

[@cutzudev]

NTTS becoming an actual programmer after debunking all these scams 💀

[@jurjurbunx2837]

ngl true

[@MasterK6565]

Fr

[@obvilyas]

yes xD

[@cachorroencuralado3887]

nah

[@meghek]

no

[@Oreoezi]

What fascinates me is it takes the time to write all possible codes to a txt file instead of just creating one, testing it and moving on to the next.

[@ikyyntts7807]

what also fascinates me is HOW theyre generating them. the odds that a fully random string of letters is a nitro code is so unholily low, that if they were to put a minutes research in to see how nitro codes are compiled and try and systematically generate random codes, they would atleast have a chance at getting one.

[@Oreoezi]

@@ikyyntts7807 if the code is 6 letters long and it can be a combination of letters and numbers that would be 6 to the power of 12 more or less. It is very unlikely to say the least.

[@Houtblokje]

@@ikyyntts7807 I think these guys are in the range of being juuuuussssttt smart enough to write a scammy brute force code but just dumb enough to not put in any more effort in figuring out codes

[@fog-]

@@ikyyntts7807 nitro gifts are much different, they're 6-8 characters long

[@ikyyntts7807]

@@fog- ah right, just an insight, apologies. but you could have also ACTUALLY utilised threading to have one thread continually generate codes and throw them into a pool, have a thread or two checking the codes. or something like that, either way the guy who made this one clearly doesn't have a clue what he's doing

[@TaxEvasion1337]

funny thing is they don't even use threading

[@itswilliboy7054]

lol

[@SyberiaK]

I thought I'm the only one who noticed that lol

[@electricz3045]

This script is memory heavy (file writing) so if they would implement threading it wouldn't be great as threading is for I/O tasks (like API requests but without mass file open, writing, closing) for these memory heavy tasks they should use multiprocessing where a process on each CPU is spawned. However i assume that they are too stupid to understand multiprocessing, they also could use threading with the queue function and not directly writing to file.

[@radon-sp]

@@electricz3045 them writing them to a file instead of doing it in memory is the funniest shit ever

[@v01d_r34l1ty]

@@electricz3045 It would definitely still have a performance benefit. I think you can spawn as many threads as your CPU supports without any performance hitch so at some point the threads would theoretically spawn on separate cores and max out the performance. Also, while sockets operate more internally (memory) for Windows, they are file-based I/O on Unix based systems (i.e. FreeBSD, macOS, Linux). Nevertheless, randomly generating a string based on random numbers seeded by time (standard random generator) is going to be wholly inefficient as it won't come near to producing similar results as a more complex cryptographically safe algorithm.

[@insig0]

I seriously think that ONLY underage discord users fall for nitro generators. Also, I still cant believe that such low human beings exist, USING kids that don't know anything to get nitro. What a disappointment.

[@izzyxvibes]

Yeah… I once downloaded one and it was an exe, but it is on my phone. And it came up with nsfw pop ups but I didn’t click any of them. Then I downloaded malwarebytes and they got rid of it lol. It was back in 2020 I believe . But I’m 13+ now since my bday was months ago, joined discord in 2018 but probably earlier since I had another acc

[@rarehyperion]

@@izzyxvibes I think you downloaded the wrong generator... you sure it said nitro?

[@insig0]

@@rarehyperion FOR REAL that NSFW popup stuff is so annoying

[@izzyxvibes]

@@rarehyperion ye it was for a pc tho. I have pc glad I didn’t download it on their

[@Hexarian]

AAAAQwAAAGEAAABsAAAAbAAAACAAAABpAAAAdAAAACAAAABhAAAAIAAAAGQAAABpAAAAcwAAAGEAAABwAAAAcAAAAG8AAABpAAAAbgAAAHQAAABtAAAAZQAAAG4AAAB0AAAAIAAAAGEAAABsAAAAbAAAACAAAAB5AAAAbwAAAHUAAAAgAAAAdwAAAGEAAABuAAAAdAAAACwAAAAgAAAASQAAAHQAAAAnAAAAcwAAACAAAABlAAAAYQAAAHMAAAB5AAAAIAAAAGEAAABuAAAAZAAAACAAAABmAAAAdQAAAG4AAAAgAAAAdAAAAG8AAAAgAAAAdQAAAHMAAABlAAAALAAAACAAAABJAAAAJwAAAHYAAABlAAAAIAAAAHUAAABzAAAAZQAAAGQAAAAgAAAAbQAAAGUAAAB0AAAAaAAAAG8AAABkAAAAcwAAACAAAABsAAAAaQAAAGsAAABlAAAAIAAAAHQAAABoAAAAZQAAAHMAAABlAAAAIAAAAGIAAABlAAAAZgAAAG8AAAByAAAAZQAAACAAAABhAAAAbgAAAGQAAAAgAAAAcwAAAGEAAABmAAAAZQAAACAAAAB0AAAAbwAAACAAAABzAAAAYQAAAHkAAAAgAAAASQAAACcAAAB2AAAAZQAAACAAAABtAAAAYQAAAGQAAABlAAAAIAAAAGEAAAAgAAAAZgAAAGUAAAB3AAAAIAAAAGIAAAB1AAAAYwAAAGsAAABhAAAAcgAAAG8AAABvAAAAcwAAACAAAABmAAAAcgAAAG8AAABtAAAAIAAAAGkAAAB0AAAALg== UTF-32

[@oxymore13]

This is honestly hilarious, I can't not imagine the thought process : "Hey let's bruteforce nitro links. But we'll make gullible kids do it for us instead." Genuinely a modern supervillain, I love it lmao

[@arpita1shrivas]

as a python programmer myself it's genuinely so funny to see a person try to encrypt their code only for it to be decrypted by a person who doesn't even code (much i think) hilarious. i want more of these videos.

[@racapadexxa_]

At the end of the day the interpeter has to see clear code, so you just replace whatever eval() or run() function with a print() and it's all useless

[@novamc7945]

@@racapadexxa_ Exactly. The code is being decoded for you, so just print it instead of doing the job of the interpreter (which is already laid out)

[@declan_youtube]

This is incredibly one-sided but as a C++ developer it pains me to see someone try to obfuscate python

[@SpaceKebab]

@@declan_youtube im sorry for you.. c++ its a horrendous language to learn

[@declan_youtube]

@@SpaceKebab It's incredibly over-exaggerated on how hard it is to learn tbh, you just gotta get used to stupidly named functions and stupid symbols like >

[@PokeHearts]

I love videos like this, especially you running through the steps you took

[@Theunicorn2012]

I love videos like this, especially you running through the steps you took

[@Thedaisyda1sy]

I love videos like this, especially you running through the steps you took

[@siyustuff213]

i love how they spend all this effort cloaking the code in like 3 layers as if anybody who will actually fall for the scam is going to look closely at the code

[@-_lIl_-]

I think they do this just so that people don't find out and be able to not fall for it or report them

[@Edvit40]

what happens in the dark, must never come to the light

[@originalni_popisovac]

weirdo

[@vnc.t]

and they coded the thing wrong too so it doesn't even work

[@Edvit40]

@@vnc.t sir they did code it right its a scam obviously they're gonna take advantage of it

[@Master_YT]

Moral of the Story: Child Labour is the best way to do anything.

[@jenkathefridge3933]

Ohhhh,thats how china makes alot of money.

[@Wuzzy69]

This comment reminded me of minute movies

[@Sockren]

thats why roblox is the best platform ever

[@thecatacombhimself]

Nestle:

[@ShiroCh_ID]

@@Sockren true true we just need to milk Parrents Money Using Child as the Proxy trully magnificent strategy that almost nobody relised

[@Marcozzz8]

The mwah ! at the end is always appreciated, love what you do !

[@OceanMalibuClub]

Discord is a place without safety and privacy

[@usernamenotknown-z3w]

Good point

[@foxmulder3833]

True

[@insig0]

Never has been.

[@lystid]

It's the users fault if they run some random files on the internet

[@cllncl]

That applies to almost everything, ever. As long as you have even a single brain cell, you cannot fall for some guy saying he can get you free stuff.

[@agnieszkazint2799]

Hey No Text To Speech, I'm a big fan of your KZbin channel. I love your informative and entertaining videos about Discord and other social media platforms. I'm also impressed by your commitment to helping people avoid scams and stay safe online. Keep up the great work! Sincerely, Bard

[@adrianfet6621]

?

[@flashu_fla]

Bro wrote a letter

[@TheMCLegendTeam164]

AI generated

[@MINDisOFF]

bro got the all the spirit elements😭 4:51 love,trust,god,eval,magic

[@dhi_holo]

Making the code readable is basically just simple puzzle solving, I'd see this in an escape room that lets decoder sites be used, kinda thing

[@xc_gwpl]

CTFs are basically that!

[@bsmn2oid]

I thought that python obfuscation looked familiar, turns out it was the same one some skid used to try and disguise a token stealer as a "maze game".

[@TroyGalviz]

I love scams

[@wevboo]

amen

[@deadeye8333]

Nah u an indian 100 percent

[@apersoniguess_]

@ArkkOfSpark! do you?

[@SpectraMoyai]

@@deadeye8333 this man right here is clearly an american

[@elnexreal]

@@deadeye8333 XDDD

[@NorthLaker]

The method they're using technically does work, but only for the first few times you try the request. After that you'll get rate limited to hell and back, and sending even more requests (say, 999995 of them) might actually get your IP banned from Discord altogether.

[@Versuffe]

its a situation where you lose no matter what. 1: you dont get a working code. 2: you get a working code, it is traced back to you. 3: its detected as a ddos, literally banning you from the website if the ip is found.

[@justanerdywoman7785]

you won't be banned, since, they have proxies in there, which means, you won't be banned, but proxies will be banned, as you still don't get banned.

[@LiEnby]

ive sent like 3000 requests to discord before, you dont get banned you just get heavily rate limited (which, if you think about it, is basically a temporary ip ban)

[@theloper19]

Theoretically, if this DOES actually get a few valid ones and sends it to the random skiddies, you could tweak the code a bit and actually send it to your own webhook, basically giving you an actual free nitro generator.

[@_KDP]

or just make it show it on your screen lol

[@Lukboo]

its easier just to literally make it send to your webhook@@_KDP

[@GuardianIsIdiot]

I nearly got scammed by a bit saying they would give me discord nitro, I had watched your video on it before and I managed to avoid it. Thanks!

[@fusseldieb]

Nobody ever is gonna get you Discord Nitro for free. If you trust somebody RANDOM, you already messed up.

[@GuardianIsIdiot]

@@fusseldiebnot for free, i missed this out, they were a friend and said it was a 80% discount. I found out later that my friends account was hacked

[@Dreagerd]

@@fusseldieb i literally got free nitro 2 times from random people 😭

[@varram3488]

6:00 the worst attempent at obfuscation i have seen lmao

[@fallgate]

Btw in terms of this crypted code, that is pyarmor obfuscator and in some point in time it has all the code in string so i just run this in pycharm community with debug points at last lines and go line by line until it has a variable with the text It could also be rewritten a little to just spit out plain decoded text when ran

[@xAffan]

Dude smart!

[@Mythitie]

@@xAffan Average programmer stuff.

[@xAffan]

@@Mythitie doesn't work if it's compiled to pyc. And there are no public decompilers so L

[@vuki4653]

@@xAffan there are public ones

[@xAffan]

@@vuki4653 not for 3.8+ / also weird seeing u here

[@matthrew]

imma be honest, you would be a pretty good python teacher

[@racapadexxa_]

For shure better than the one who wrote the code

[@JamesRelok]

how lmao what he said was so basicthat someone that doesnt even know python could do it lmao

[@nubidubi23]

@@JamesRelok 🤓🤓🤓

[@spline5243]

@@nubidubi23 "someone is smarter than me"

[@dustin0001]

*Concatenation*

[@brandensnow990]

the best part: all you have to do to get the "gift link" yourself is make a webhook and change the link after you deobfuscate it

[@racapadexxa_]

And find the 1 in multiple billions change to generate a working code before Discord bans your IP from their site

[@2fas_lol]

Technically, you could fork it and change the webhook to your webhook, so it sends YOU the working nitro INSTEAD of the random people.

[@racapadexxa_]

Yea the only problem is that the code to generate the code doesn't work

[@Squiidgy]

oh wow 😂

[@BostYT]

@@racapadexxa_ It does but it is a very slight chance

[@IanGaming101HD]

@@racapadexxa_ it does, it validates it through discords api until it finds a valid gift so yes you can just make it send to you instead of the webhook

[@racapadexxa_]

@@IanGaming101HD Yes good luck with a one in a several trillion possibilities to get one code

[@catnap7656]

this is like the guy from Willy Wonka making his workers find a golden ticket from millions of chocolate bars and they can't even keep it for themselves

[@akii9553]

why the hell did this turn into a computer science lesson bro im on holiday

[@corruptor55]

Although you said the process was easy, the fact that you de-compiled all that code to prove why these "nitro generators" are scams is commendable. There definitely needs to be more awareness about said scams, as the phrase "don't accept random links from strangers" unfortunately isn't common knowledge...or not enough people care to double-check. Either way, feel free to keep making these kinds of videos; I'm gonna need this information at some point o-o _/ /

[@FlashDrive356]

5:04 Wow, KZbin's compression algorithm _really_ didn't like that

[@kormagogthedestroyer]

Imagine setting up a scam and not even going through the effort of making 5 different alts

[@nikoijp]

Edit the code so that nitro codes generated that don't work gets sent to them so it spams them with invalid codes.

[@Liggliluff]

These generators generate 16-character long links out of 60 possible characters. That's 60^16 possible links. That's 2,8 x 10^28 different codes. So if you have a server with 10000 users who all generate 100000 codes, that means the number is now 2,8 x 10^19. The likelyhood that you manage to get a real code is so tiny. But I do still think Discord could increase this by making the links 32 characters. Because while the likelyhood is already small, it's not small enough for these people. Making it 32 characters long, makes it so small that it's not even worth even trying.

[@rayanalbozan5576]

That would be the case if there was only one code. Of cource there is way more but still, it will be extremly rare for someone to hit the jackpot and get nitro for free

[@retromusician_official]

I actually learned how to do basic obfusctation in python, thank you!

[@in1]

This is just beautiful code. Love the names of the variables

[@Fuofff]

Lmao just saw the names

[@rage3288]

0:07 IS THAT THE JENNY MOD FOR MINECRAFT SERVER?!?!?!?

[@CommandoJacky]

OH NO HE GOT CAUGHT!!!!!

[@BrodyTraxler]

Yes it is

[@flizzycat]

I like how this technically isn't really a scam. As in, it won't steal your token, join servers for you or something like that. In theory this can work although chances are probably very very small

[@NinjaKiwiOfficial]

And you could change the python at the end so if a code is SOMEHOW found, it would just show it for you

[@spacexplorer_]

Potrošački savetnik

[@jakethebeest2376]

its still a scam, just stealing your computers processing power to generate random nitro links. and spamming discords api in your name. it wouldn't be a scam if it gave you the code if it did find it, but it doesn't it just gives it to the programmer

[@flizzycat]

@@jakethebeest2376 can discord ban you for that?

[@flizzycat]

@@spacexplorer_ 👀

[@RyderKunAnimations]

No ones gonna talk about there's a jenny's mod server on his list?

[@foxyfox4116]

same!)

[@cgytrus]

2:20 the proper way to do this is by using find and replace: ctrl+h, search mode: regular expression, search for "^#.*", replace with ""

[@vradeus3438]

Did these guys learn nothing from those free robux generators😭

[@barry63196]

8:18 the 4th server in your servers list....

[@ciach0_]

7:33 Also, there is a typo which says "entitelemnts", so this has no chance to work

[@trucksarenoisy]

lmao

[@Fixator10]

I love how they basically scream that their code is best and multithreaded, but no actual threading in code.

[@tixonochek]

I ran quite a lot of nitro generators without even knowing what perks were in the past. Fortunately i changed OS few times.

[@TheyCallMeIce]

Not kid me believing all the "survey/app tasks for cash" apps, AND downloading a code generator for one of these...

[@MetaBloxer]

If I were in a situation like this, I would absolutely NOT spam their webhook. That would be a huge waste of time. Just tweak the code a little so it sends EVERY nitro link to the webhook instead of just the valid ones :)

[@tonyt2i512]

its like giving your 20 years of luck to someone else lol

[@AstronomyAstropy]

can you make video about "User is suspected..."?

[@universoul8929]

It's a copypasta that only gullible people fall for like you

[@Rayanvision]

Lmao the mwah at the end gets me everytime, it's weirdly sweet

[@HyperNovva]

I make sure to pause the video like 10 seconds before the end because of that outro. Everyone loves it but it grosses me out.

[@magnum_dingus]

My guy, you need some CyberChef chef in your life.

[@funwithalbi2425]

you seem like a good programmer since everything you did was correct

[@giakhanhvn2mc]

absolute unnecessary bullshit, just change the exec, eval to print and the code will print out without going through any of these crap, interpreted python is a hot piece of garbage in terms of security

[@funwithalbi2425]

@@giakhanhvn2mche was trying to obfuscate it

[@giakhanhvn2mc]

@@funwithalbi2425 unnecessary steps, he can just replace all exec to print, it will spit out the code instantly, no hassles

[@NinjaWarotMCph]

man these nitro generators are absolutely hilarious By the by, some knowledge of ROT13 for the curious: ROT13 is not computer encoding but a _cipher._ If anyone here knows Caesar Cipher, it's that basically. For the uninitiated: It's an "encoding" where each letter is shifted a number of letters up or down. Take the case of the letter E, which is the fifth letter. If we say "shift three up", that means we need to find the third letter _after_ it, which is H. If we say "shift two down", that's the second letter _before_ it, which is C. ROT13 is a special form of these ciphers, since the ROT13 makes you find the thirteenth letter after it... which is also the thirteenth letter before it. That's because there are 26 letters in the alphabet, so you only need to find the letter of the ciphered letter's mirror position. (Example, if the ciphered letter is A, then the decoded letter is Z.)

[@4rainxl]

wow no cap discord really should make you a mod

[@lottery248]

the even bigger problem is that Discord did nothing to gives users more so that less likely they would want Nitro and so is the chance they fall into those scams.

[@Fluxirya]

i'm imagining someone sending the scammer spam messages using his webhook link.

[@xClairy]

Lmao no wonder he said the web hook is invalid don't try it cause it probably died

[@-_-_-_-_-_-_-_-_-_-_-_-_-_-ucq]

So does that means you can send "fuck you scammer" messages using his webhook Link?

[@declan_youtube]

​@@-_-_-_-_-_-_-_-_-_-_-_-_-_-ucq the webhook doesn't work anymore, but if it did, yes

[@noe-sanchez]

Christmas rewards basically pulled up the community bitcoin mining card lmao

[@ДмитроПрищепа-д3я]

except their script sucks ass. They should've optimized it more, it won't find shit.

[@Danklord77]

Damn Rewards Server Still Exist?

[@Danklord77]

@Shokk nah this is mine

[@littlegayboy45_]

I'm not too completely sure on how this all works, but you explained it really well! It was also interesting to watch for some reason, and fulfilled the promise of it being satisfying. Thank you for entertaining 9 minutes of my day lol.

[@kamisama7462]

Learn python buddy, it's fun and easy

[@Theunicorn2012]

I'm not too completely sure on how this all works, but you explained it really well! It was also interesting to watch for some reason, and fulfilled the promise of it being satisfying. Thank you for entertaining 9 minutes of my day lol.

[@littlegayboy45_]

@@Theunicorn2012 bro?

[@alikeremozfidan288]

it has two steps: first code is just encoded junk filled with comments, he decodes and gets to actual code. then, second code just takes a random guests to find a random nitro gifts. they verify the gift code and if it actually works, it will sent to programmer instead it uses your computer as nitro code miner

[@kittenzrulz2314]

There are safe ways to run shady programs and code including using a VM.

[@starleighpersonal]

Code dosent work. There’s a major typo that causes it to brick itself half way through execution

[@win10mc]

@@starleighpersonal i assume you mean line 83 "entitelmnts"?

[@therandomguy6200]

Jeffrey really matches the "Nerd" PFP in Discord

[@ItzYojoPlayz]

Wait, so technically couldn’t you change the code and make it so you get the nitro? Update: I got it to work if you replace the webhook url with one of your own

[@universoul8929]

It's mathematically impossible to generate a valid code in your lifetime

[@ItzYojoPlayz]

@@robertplayz9157 how do you do that?

[@starleighpersonal]

@@ItzYojoPlayz print()

[@ItzYojoPlayz]

@@starleighpersonal thanks

[@filipetrujeira3359]

@@universoul8929 Do not say it is mathematically impossible when it is not. Math can NOT calculate luck. On average, it would take more than hundreds of times the age off the entire universe, but it's also possible for you to get 20 codes in a minute, it's just that the probability is astronomically low.

[@caplushymori]

2:29(when you run out of words to say) * ntts * "so my computer is a little "drunk""

[@GuardianIsIdiot]

Yes

[@eggisbored]

python dev here. it literally says “import random, string” at the top, which basically means they can generate random strings of text 💀

[@koiwaiyotsuba]

what does that have to do with anything

[@eggisbored]

@@koiwaiyotsuba it just generates random text, but i commented before i finished the video, completely on me mb sorry

[@SamuraiDestroy]

8:05 OK but this does mean that if someone was really desperate for free nitro, they could rewrite the code to NOT send the valid codes to the webhook and instead have it print them. I know what I must do.

[@NichtDu]

No because they will notice your ip/account spamming the api endpoint and ban you

[@NichtDu]

+ it is mathematically impossible to generate a valid code during your lifetime

[@xXXEnderCraftXXx]

XD same thing that I tought.But this is still a mean thing to do.By using those somehow revealed links you are stealing nitro gifts from people.

[@ParadiseReserve]

thts wht i was thinking lmfao

[@vineeeeed9342]

@@NichtDu it doesnt use your account when checking, and you could add a 1s delay for each link But nitro generators never work so dont even bother

[@MajinManju]

I love videos like this because it takes away this façade hackers have, that they are some type of coding god or mastermind, but in reality its just garbage code packaged in a different way.

[@user-xr7fw4ks2n]

if you de-obfuscated it, couldn't you just remove the bit where it asks discord's api "Is this code legit" and treat EVERY code it generates as legit, such that they receive a bunch of useless links?

[@declan_youtube]

Yes, but we have no way of contacting the webhook they use to receive the messages

[@elnexreal]

@@declan_youtube actually we have, you know if you have access to the webhook link you can send anything you want into it. You can do this by coding a script or by using tools like discohook

[@declan_youtube]

@@elnexreal Yes, but the webhook in this sample is dead - so we still cannot contact the webhook being used

[@vrl2012new]

Fun Fact: In Python, to add a note you need to add # or #[space] (can vary I think idk I’m new to Python) to create a note which doesn’t count as code which means the code shown at 2:02 is probably fake. Oof I messed up the spelling of “space” Also uhh a lot of the “[name]=“ stuff and “[“[int]/[value]”]” are just variable text. IGNORE THIS COMMENT AS I MAY BE WRONG!

[@patrickFREE.]

Yes it is not necassary, at the top yoh see a line without '#' and atart with import requests. The code works from the syntax side

[@capnryna]

Since python obfuscation still needs python to run clear code, you can simply replace the eval() or run() with print()

[@PlaceboReiki]

Could you just remove the part with the send it to the owner of the program and instead use it for yourself or like send it to yourself?

[@starleighpersonal]

It’s mathematically impossible to generate a code in your lifetime unless you have a data farm of ASICs grinding away for decades

[@PlaceboReiki]

@@starleighpersonal Oh ok thx

[@ATC_9780]

1:40 Steven He

[@SolarKid123]

3:33 rot13 is actually a letter substitution cipher, which replaces a letter with the 13th letter after it! Hope this helps!

[@sigma7636]

You could also just replace the last 'eval(compile(...))' with a print. Then running the code in replit would have it print out the deobfuscated version.

[@alex59292]

You must be new here, we don't take simple or easy way here we only use 500 websites and spread false news about coding since he doesn't know one thing he claims and has nothing to back him up

[@foundfpvfootage]

@@alex59292 you could open the replit and fact check it?

[@alex59292]

@@foundfpvfootage well he did get code from this video but really really inefficient

[@alex59292]

@@pani777 about the nitro sniping video on how it's spamming discord api when it's just a gateway event 💀💀💩💩

[@sigma7636]

@@alex59292 ?

[@ParkxVR]

Wouldn’t I be able to change the webhook to my own? So I get the link?

[@racapadexxa_]

Yes, but if you have an average luck you'll need to wait centuries for it to generate a valid token.

[@ThatOneRobloxDev]

So basically, the owners of the server got a random script from the internet, not knowing what it does and not knowing any code at all, and shares it with over 200 people, and it ends up scamming no one, as it doesnt work. Theres no winner or looser in this story.

[@meghek]

it scams someone

[@goncalomarinho8478]

Roockie mistake that verification system to the gift codes will just be timed out after like 5 tries. They should use some way to mask the ip. Also this type of system of brute force can run for a full year without find anything. Anyways great video!

[@JamesRelok]

When a nitro code is bought you have 48h to claim it. So if the code isnt claimed within 48h it will be regenerated and the chance of a script kiddie guessing it is 1 in 218,340,105,584,896.

[@melo-7904]

bro really said to the scammers "dude your code sucks and your encryption sucks let me tell you what you should be doing to code anything really"

[@Tw1fty]

Who else tried to join the server to troll the owner but saw that its not on disboard anymore :P

[@ErrorSyrox]

Sheeesh this man is really good on explaining stuff with code, bruv make like a whole 30 min video about smth that is normal if you scripted it(planned it) cuz it is very not boring

[@Onrirtopia]

instead of doing all this base64 stuff you could've just removed the evals and printed it lmfao.

[@giakhanhvn2mc]

yea, agreed, cmon, this isn't C++ or java or any compiled programming language, python is the easiest to de-obf than any other things

[@alex59292]

i was gonna say that

[@Onrirtopia]

@@giakhanhvn2mc yeah, altho it should be noted that VM languages like Java, Kotlin, C++, Dart and Lua are extremely easy to de-compile. I woulden't really ever use them for anything to do with security.

[@Onrirtopia]

@element what are you talking about? VM languages are not easy to deobfuscate because unlike python they are not interpeted but compiled. Their bytecodes can be transformed back to regular code therefor being easy to break in on the source codes. Python is also extremely easy to deobfuscate seeing as it's interpeted and they can't hide any code from you.

[@Onrirtopia]

@Sir Avian I wasn't talking about obfuscation but rather compilation. Lua is not interpeted like python but compiled and ran in a virtual machine like java or c#. You can very easily get the original source code from this compilation. The lua compiler also destroys all unused variables and dumb stuff that you write meaning all your obfuscation is completely useless.

[@qwj7359]

Bro you just ruined my whole plan

[@monkaSisLife]

its almost like they are creating their own botnet to bruteforce nitro codes

[@hi-kt3qr]

Except they are all running on basically the same system because replit users all share servers and there’s only so many servers.

[@PliskinYT]

I was just gonna say this, this is just a botnet with extra steps

[@NoahtheEpicGuy]

Code obfuscation and written in a super modern high level language? Wow, that's original. Assemblomaniacs have had you all beat for _centuries_

[@daleryanaldover6545]

If you remove the webhooks, you can technically keep the working nitro codes but make sure to run the script on a VM or something

[@kzxv_]

what's the point of running it in a VM? either way mathematically impossible

[@nnou]

7:35 "entitelemnts" thats totally a valid endpoint

[@vvv331]

I really love how satisfying it is to bruteforce poorly obfuscated code, i once did that with one of the exploits and it was poorly obfuscated that most of obfuscation was redirecting to unobfuscated source code. It's honestly funny seeing how their obfuscation just miserably fails and ends up exposing source code. Also, I'm pretty sure everyone know that you would never run something that's obfuscated so, it makes it even funnier.

[@Hexarian]

I'd like to see you try bruteforce our code.

[@alex59292]

@@wnuggy ikr base 64 isnt obfuscation

[@pwrsocket]

L furry

[@declan_youtube]

​@@Hexarian May I try?

[@Hexarian]

@@wnuggy It's not, Do you think I'm that stupid? Please remember that I do not have your brain in my skull.

[@imlimpoism9260]

i'm actually surprised they didn't add cookie loggers to it

[@hi-kt3qr]

You can’t do that on replit with python

[@JamesRelok]

Thats not possible you little skid.

[@JamesRelok]

But you do play roblox, you are 10 years old MAX.

[@imlimpoism9260]

@@JamesRelok you do realise the average age of a roblox player is well above 10, right?

[@imlimpoism9260]

@@JamesRelok i don't script, let alone script in python.

[@anonymousmagician5267]

that outro was the most beautiful thing I have ever seen

[@connor255]

A NEW NTTS VIDEO WOO

[@Crumb]

Lololololol rot13 I've never seen someone use a rotation cypher in the wild, that's amazing, brings me right back to childhood learning about encryption

[@haffey2]

I just got doxxed because i sent a sticker

[@cloudneverclear]

💀 only in Ohio

[@haffey2]

@@cloudneverclear Fortnite

[@starleighpersonal]

Your fault for having bad privacy habits causing your info to be easily found

[@billyfromzera4162]

Nice explain, Shit like this happen really often and... Sometimes they send a software. I analysed it with the fantastic linux ubuntu terminal (i didn't decoded it cause i wanted to have some stuff like the pyinstaller), and it litteraly the same as this shit but in a software with a virus that litteraly take your discord token from your discord application. Well cya stay safe!

[@declan_youtube]

May I ask what you mean by "I didnt decode it because I wanted pyinstaller"? But other than that, cool

[@billyfromzera4162]

@@declan_youtube i analysed the malware with the terminal and i found what pip (pyinstaller) he used and sum other things with commands

[@declan_youtube]

@@billyfromzera4162 how can you analyze a python sample without even using vim or a text editor? Especially for a pyinstalled sample

[@billyfromzera4162]

@@declan_youtube linux provide that + i used the notepad AND i runned it via the terminal

[@exdeedeedee]

i feel bad for anyone who falls for this tbh

[@JohnSmith-ri6wq]

Hey NTTS I was wondering how you got your Notepad++ to have the whole thing fit on the screen. My code runs off and no matter how hard I look for a margin video I can't find one lol.

[@Twingamerdudes]

The funniest thing is once you decode the program, you can just change one line of code so you get the nitro instead (don't do this, it's illegal).

[@racapadexxa_]

It's not illegal, you just have to wait a million years for a code that will be already expired to find it

[@Twingamerdudes]

​@@racapadexxa_ That as well, it's illegal since you are basically doing a DDOS on discord servers and pirating discord nitro if it is successful.

[@felixbemme7257]

@@Twingamerdudes just no. This is not illegal and it isnt a ddos. First of all DDOS means Distributed Denial of service so this would be a DOS. If Discord wouldnt be able to handle that then they should not operate a Platform like that. This one is a very ineffective brutforce attack. Which is Not against any laws. Its Just against discords TOS

[@Twingamerdudes]

@@felixbemme7257 did some slight research if almost causing a DDOS is illegal, turns out it's not, still, pirating discord nitro is still illegal since you're meant to buy it or receive it as a gift. Not just get it for free (if not being gifted it)

[@pold111]

the more funnier thing is that it's practically the same as a miner but there's a .01% chance of you actually getting anything, you're damaging the components of your own pc and receiving nothing for it

[@Kye5000]

You can also delete any webhook by its URL, if you send a HTTP request to the webhoook url with the 'DELETE" http method it will completely delete the webhook, its on the discord developers documentation

[@Slada1]

That's how it was probably deleted

[@magentaballthepolandball5130]

quick question, what is that server with the jenny image?

[@si8915]

the "muac" at the end always makes my brain release dopamine