This is a Selenium and Python based Discord TOTP forcer. It attempts to brute force randomly generated 6 digit TOTP codes, of which there are 10^6 (1000000) possible codes, with a random delay between each attempt.

• Brute forces 6 digit TOTP codes
• Ratelimit avoidance (Cooldown between every code attempt)
• Color coded print logging
• Waits for you to complete the hCaptcha
• Automatically closes when the hCaptcha ticket expires, and prints useful info (e.g No. of attempted codes, time taken, no. of ratelimits)
• Blocks analytics URLs such as Cloudflare logging, Discord Science, and Sentry.io
• User friendly
• Allows to use environment variables for user-supplied e-mail and password.

1. Clone/download the repository, and go to it

git clone https://github.com/hydino2085143/Discord-OTP-Forcer.git

cd Discord-OTP-Forcer

2. Install the requisite dependencies.

pip install -r requirements.txt

3. Fill out the necessary credentials in the .env file.
4. Run the main.py file.

python src/main.py

5. An automated Google Chrome window will open. When the hCaptcha appears, complete it as normal.
6. Wait for either a successful login, or a closed browser window (Failure to brute force codes)

In December 2021, I lost access to my passwords and OTP list due to a file syncing issue. I was able to recover most of the credentials, except for my Discord Alt. When I contacted Discord Support, they informed me that due to their security policy, they could not disable 2FA for that account, which while it is understandable, is unfortunate. As a proof-of-concept program, I hacked together this crude script which simply brute forces randomly generated 6 digit numbers to the Discord login's TOTP field.

• Attempted code is displayed with a delay
• Depends on HTML element class names/english localized strings in order to detect failure/success
• Script relies on the Chrome WebDriver, thus Google Chrome will have to be installed.

• TheGamer456YT for their frick-discord-2fa script, which gave me the base for the codegen.py and textcolor.py libraries.

THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

Tldr; I am not responsible for anything you do with this script, and I do not condone (but cannot prevent) the usage of this script to hack into accounts which you do not properly own. Read the License for full information on your rights and responsibilities which pertain to this program.