DiscordChatExporter VS CyberChef

DiscordChatExporter: https://github.com/Tyrrrz/DiscordChatExporter

It's a standalone program using the API in a nonstandard way but I don't think anyone's been banned for using it yet.

In case anyone is not aware, you can download Discord logs.

https://github.com/Tyrrrz/DiscordChatExporter

I'm sure many people are annoyed by online forums being replaced by Discord. For a while I've hoarded servers I'm a part of with this tool. It's incredible, there's even a frontend tool they also made to browse your archived servers. Over time I've helped people find deleted guides, individuals who edit/delete content to get around rules, etc. This is becoming more of a necessity as time goes on.

I've used this tool: https://github.com/Tyrrrz/DiscordChatExporter

Someone in the Discord server could try using DiscorcChatExporter.

Discord to me is like a burning library when it comes to archiving. You can try to save somethings but servers are disappearing all the time. There's discord chat exporter to archive discords, you can have an option to save attachments/images that you have to toggle on otherwise it won't. You could set it up so you could just use your account (which is against tos) or make a bot which does need to be invited to the server in question. So there is a way to download discords, but it risks getting you banned from discord. Note that being able to open the resulting html file relies on your computer, as some exports I've done are BIG and my computer being unable to load the file and read it (and no, my computer is not bad).

Then we take the encrypted text and use CyberChef to decrypt it.

Let's go to CyberChef and insert our pieces of evidence.

A parameter was changed from '2AMBCgIQBg' to 'CgIIAdgDAQ%3D%3D' which is just the correct base64 encoding they should have been using the entire time.

I don't think this was a hostile action by Google, I think someone just added better input validation for security reasons and it accidently broke the bad requests they were sending.

https://gchq.github.io/CyberChef/#recipe=URL_Decode()From_Ba...

❗This is indeed the flag, but the text is encrypted with Base64. Usually, the presence of padding character "=" indicates that's Base64 type of encoding (but that's only one of the hints). To decrypt it, we can use CyberChef. Copy-paste the text and we either:

It uses a combination of magic bytes (like the `file` command), entropy analysis and character frequency detection to determine whether an output is likely to be of interest to the user.

The file type mechanism is written here[0]. There's a list of all signatures we detect here[1].

[0] https://github.com/gchq/CyberChef/blob/master/src/core/lib/F...

I think this can be deciphered using CyberChef...