c0an / discord-tenor-exploit

A sparkJava application that renders an image from a Tenor URL (Used for the Discord Tenor Exploit) [tpnor.com]

Discord-Tenor-Exploit

A sparkJava application that renders an image from a Tenor URL (Used for the Discord Tenor Exploit) [tpnor.com]

Technologies used

• sparkJava
• Google Gson

How does the exploit work?

Discord's client utilises a search and replace system for their message editing system, this works by typing the message s/<find>/<replace> - in this example when you send a tenor URL https://tenor.com/view/my-dog-stood-on-a-bee-amber-heard-johnny-depp-dog-bee-gif-25657536 when typed s/e/p as a new message, it will replace tenor.com to tpnor.com which is our own hosted website, and grabs the Tenor Gif from the number id.