Browser extension to protect Discord Web from token theft, XSS attacks, and malicious scripts.
- Webhook Exfiltration: Blocks attempts to send tokens to Discord webhooks
- Suspicious Domains: Blocks requests to known data exfiltration services
- Token Detection: Identifies and blocks token theft attempts
- Script Injection Guard: Monitors and blocks malicious script injection
- Iframe Protection: Prevents clickjacking attacks
- Form Hijack Prevention: Blocks form action tampering
- Clipboard Protection: Monitors copy/paste for token leakage
- Fetch Hook: Monitors all fetch() requests for token exfiltration
- XHR Hook: Protects XMLHttpRequest from abuse
- WebSocket Guard: Monitors WebSocket connections
- Eval Protection: Detects suspicious eval() usage
- Download or clone this repository
- Go to
chrome://extensions - Enable "Developer mode"
- Click "Load unpacked"
- Select the extension folder
- Go to
about:debugging - Click "This Firefox"
- Click "Load Temporary Add-on"
- Select
manifest.json
Discord Web Page
↓
┌─────────────────────────┐
│ Content Script │ ← Monitors DOM, blocks injections
│ - MutationObserver │
│ - Event listeners │
└─────────────────────────┘
↓
┌─────────────────────────┐
│ Injected Script │ ← Hooks APIs, blocks exfiltration
│ - fetch() hook │
│ - XHR hook │
│ - WebSocket hook │
└─────────────────────────┘
↓
┌─────────────────────────┐
│ Background Worker │ ← Monitors network requests
│ - webRequest API │
│ - Threat logging │
└─────────────────────────┘
| Threat Type | Protection |
|---|---|
| Token Grabbers | API hooks prevent exfiltration |
| Webhook Theft | Request blocking |
| XSS Attacks | Script injection monitoring |
| Clickjacking | Iframe blocking |
| Clipboard Hijack | Copy/paste monitoring |
| Eval Injection | Function hooking |
Click the extension icon to access settings:
- Toggle webhook blocking
- Toggle token exfiltration protection
- Toggle script injection guard
- View threat statistics
This extension:
- ✅ Runs entirely locally
- ✅ No data sent to external servers
- ✅ No analytics or tracking
- ✅ Open source
MIT License - Part of NullSec Linux project
