Botnet SMSBotBypass - Discord

[dEEpEst]

SMSBotBypass​

Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API.

It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system :

• he's gonna receive the sms confirmation code.

Then, you use the bot (!call 33612345678 snapchat). The bot is gonna call him, using the snapchat service, ask for the code received. If he send the code using the numpad, then your gonna receive the code and be able to reset the password. It's like an automatic system for SE.

API​

The API requests availables & working :

• /call with POST DATA :
  
  • to: theClientPhoneNumber
  • user: theUser
  • service: theUsedService
  • name: theNameOfTheUser
  • password: yourApiPassword
• /get with POST DATA :
  
  • callSid: theCallSid
  • password: yourApiPassword
• /stream/service with GET DATA :
  
  • service: theServiceNameYouWannaUse
• /voice/password with POST DATA :
  
  • password: yourApiPassword
  • callSid: theCallSid
  • Digits: theDigitsEnteredByTheUSer (not required)

Bot Commands​

All the Admin commands :

• !user add @user : allow someone to use the bot & the calls
• !user delete @user : remove someone or an admin from the bot
• !user info @user : get infos from a user
• !user setadmin @user : set a user to admin

All the Users commands :

• !secret yoursecretpassword @user : set a user to admin without been admin
• !call phonenumber service or for example !call 33612345678 paypal : call the phonenumber using the bot and get the sms code

The differents call services supported :

• Paypal
• Google
• Snapchat
• Instagram
• Facebook
• Whatsapp
• Twitter
• Amazon
• Cdiscount
• Default : work for all the systems
• Banque : bypass 3D Secure

How it works ?​

1. When you do a !call 3312345678 paypal, the Discord Bot sends a post request to our private api, who is gonna save the call into our sqlite DB and send the call to our twilio API.
2. The Twilio API use our /status route to know what to do in the call, the status route returns TwiML code to Twilio.
3. The /status route returns the self hosted service song using the /stream/service route.
4. If the user enter the digit code using the numpad, the song stops, it thanks him for the code, and end the call.
5. The /status route send the code to your discord channel using a webhook.

Prerequisite​

• Node.js & NPM from the last version.
• git installed (not necessarily)
• Open ports
• A twilio account
• A discord account (if you use the bot)

Install​