It's important to note, for a lot of things these bots DO NOT need administrator permission, it requires extra work because you will have to more manually set em up, but you can control via permissions what the bot is and isn't allowed to do. I saw setup like that on a server that had owner's personal channels, Dyno was not given admin rights to not be in those channels.
I started coding discord bots myself recently, and I even have a custom invite command that creates an invite link for either: Full Admin rights, or just the neccessary rights that need to be there to use the commands. Oh, and also all the community enabled commands have their replies set to only be visible to the user that used the command
It's important to note, for a lot of things these bots DO NOT need administrator permission, it requires extra work because you will have to more manually set em up, but you can control via permissions what the bot is and isn't allowed to do. I saw setup like that on a server that had owner's personal channels, Dyno was not given admin rights to not be in those channels.
Btw, mentions don't work because the developers of the bots can disable mention by sending enabled_mentions to the Discord API, so even if the bot pings @everyone it won't mention anyone because "everyone" wasn't included in the allowed mentions, same thing for roles and users
Btw, mentions don't work because the developers of the bots can disable mention by sending enabled_mentions to the Discord API, so even if the bot pings @everyone it won't mention anyone because "everyone" wasn't included in the allowed mentions, same thing for roles and users
Fut fact : an @everyone exploit was found in Koya. It had a hanger game and when you tried a letter or a word it would repeat it. Someone did this in the koya server and pinged all of the tens of thousands ppl here, it was really funny seeing the chat being flooded like that.
I know someone who used webhooks to mirror an ingame chat on a game he made into the discord. He did not sanitize for pings, and webhooks always have ping permissions.
(5:20) Don't give bots admin rights You have said it yourself. This is harmful. The developers might slip up. The bot might be hijacked. Only give necessary permissions.
really doesnt matter cuz the bots still would need move rights giving ranks etc. they basically have admin without admin and can fuck ur server up anyway
@ZeroDayEx Yes that's true, if you have a bot that auto-bans people based on factors. Then they could ban almost everyone. However, if you only have a bot that gives ranks (special roles) based on things, then make sure that t lhe ranks are the lowest roles and that the bot has a unique role placed right above the ranks, but all other roles that can give permissions are above the bot. The worst the bot can do is giving out ranks to everyone or delete the ranks. It's not much of a harm.
I didn't block staff pings on my server as I have only about 400 members and I think people should ping us if something happens or so. Also, I manually changed permissions of my bots. None of them has admin or manage server perms. I use blargbot for moderation purposes, this bot isn't very popular but it's awesome and it comes with a great templating engine for tags and custom commands. I turned off the tag command for normal users, same for most of the commands, and custom commands are server-wide staff-managed so it doesn't matter here.
Going to now use these methods to irritate the biggest servers I can!. Yeah I'm suprised you're only bringing this up now, it's been around for ages and won't lie it was always funny to me. Great video though!.
The actually good thing in this is that a while back you could spam invite links with the tag / remindme command , but now they removed the possibility to add invite links.
The legend says that tags in moderation bots will soon become so advanced that discord users will be able to kill the whole humanity of Discord using AI
It’s probably been patched at this point. Once a zero-day gets discovered, the developer will work immediately to patch it, assuming developer is still maintaining the bot.
And? Unless you're being sarcastic, videos like these can help raising awareness for server owners/folks who own the server, so that they can take measures towards such things.
I kinda miss those normal commands that you actually have to put on chat for most bots, I still prefer the slash commands but there is something with it that idk... nostalgia ig
this could be solved with the bots utilizing automod api to scan the user input on those commands for the things that they can see in your automod rules. that's a cleaner solution than having to add your rules to both all of your bots AND automod, were these bots considering adding a global filtering for all the commands.
Or just dont use a bot lol, go for other stuff like automod to filter and discord default messages to welcome people (or onboarding if youre lucky enough to not have server verification)
@@thisis_mudchute ... Discord builtins will never be a good enough replacement for bots. Bots are far more customizable and not even that hard to make.
the integrations menu is the best way to manage your slash commands by far, it's discord built in and you can choose what role, channel the command is available to. and not having to go to any website
I just use Wick bot, these commands aren't on Wick and if they were there's systems in place so that you can send a maximum of like 3 tags in a row within like a couple seconds, any more than that and you're put in quarantine, works with other bots as well so if your bots end up in quarantine then you know you've got something broken there
that is terrifying for mods and everyone who moderates a server, i dont (im a chaos causer) but doin this makes their lives harder so im just gonna alert em
2:02 - Twitch has a similar issue with it's Automod if the blocked word is used in a quote command you could do quote (Insert number here for this example 25 because that's where I noticed it)
ntts, why couldnt you make this loop or is there checks in place to prevent this: > set Persons's afk to ping Person2 > set Person2's afk to ping Person1
i once had a guy on a server i moderate use a carl command called /fun clap to post cheese pizza and some guy called him out for it (some of his messages got delted but the guy that called him out had msg logger) and he send the guy that called him out an human skeleton in an baththub with like organs and blood on the skeleteon just sitting in an baththub
Wouldn't \@everyone work? Some bots might add a backslash in front of the @everyone ping, but if you'd type \@everyone would it cancel out the backslash?
@@asfsadfsafdfasdf4964 i assume that reply was to me so to answer that discord does not allow bots to use commands i made an mistake in my previous response if the bot does not have checks then it can be a loophole
yeah duh of course you cant ping everyone and here. the devs of these bots arent totally brain dead and use `allowed_mentions` to make sure it doesnt ping people.
It's important to note, for a lot of things these bots DO NOT need administrator permission, it requires extra work because you will have to more manually set em up, but you can control via permissions what the bot is and isn't allowed to do.
I saw setup like that on a server that had owner's personal channels, Dyno was not given admin rights to not be in those channels.
I started coding discord bots myself recently, and I even have a custom invite command that creates an invite link for either: Full Admin rights, or just the neccessary rights that need to be there to use the commands.
Oh, and also all the community enabled commands have their replies set to only be visible to the user that used the command
cool@@PFRamon
teach me sensei@@PFRamon
It's important to note, for a lot of things these bots DO NOT need administrator permission, it requires extra work because you will have to more manually set em up, but you can control via permissions what the bot is and isn't allowed to do. I saw setup like that on a server that had owner's personal channels, Dyno was not given admin rights to not be in those channels.
If you declare with your mouth, 'Jesus Is Lord' and believe in your heart that God raised him from the dead, you will be saved. -Romans 10:9
Btw, mentions don't work because the developers of the bots can disable mention by sending enabled_mentions to the Discord API, so even if the bot pings @everyone it won't mention anyone because "everyone" wasn't included in the allowed mentions, same thing for roles and users
and also theyre in an embed, which afaik doesnt allow mentions (at least not back 2 years ago when i made discord bots)
@@fxiqval Yeah mentions inside embeds doesn't mention still
Btw, mentions don't work because the developers of the bots can disable mention by sending enabled_mentions to the Discord API, so even if the bot pings @everyone it won't mention anyone because "everyone" wasn't included in the allowed mentions, same thing for roles and users
@@Theunicorn2012 what
If you declare with your mouth, 'Jesus Is Lord' and believe in your heart that God raised him from the dead, you will be saved. -Romans 10:9
ah yes now I know how to raid my server! with zero people on because I have no friends! 😍
Oh look it's this edgy "I have no friends" thing again
@Savetion..you don’t even have any 🗿🗿🤣🤣💀💀
it's a joke
@Savetion..do you have a superior parent to get attention from?
Let me joinn
Fut fact : an @everyone exploit was found in Koya. It had a hanger game and when you tried a letter or a word it would repeat it. Someone did this in the koya server and pinged all of the tens of thousands ppl here, it was really funny seeing the chat being flooded like that.
Fut fact lol
i used that before
I am going to understand none of this but I will watch, enjoy, and stay until the end just to experience the love I haven't felt since my youth
@@videolessfoolbecause it's a spambot, you dummy
@@videolessfoolits a bot. Don't give them any attention
@@videolessfool yk its bot right ? right ?
@Savetion.. the meat riding is crazy
my friends server has the /afk command mwehehehehe 😈
I know someone who used webhooks to mirror an ingame chat on a game he made into the discord. He did not sanitize for pings, and webhooks always have ping permissions.
@@hi-kt3qr But a fun one
(5:20) Don't give bots admin rights
You have said it yourself. This is harmful. The developers might slip up. The bot might be hijacked. Only give necessary permissions.
really doesnt matter cuz the bots still would need move rights giving ranks etc. they basically have admin without admin and can fuck ur server up anyway
@ZeroDayEx Yes that's true, if you have a bot that auto-bans people based on factors. Then they could ban almost everyone.
However, if you only have a bot that gives ranks (special roles) based on things, then make sure that t lhe ranks are the lowest roles and that the bot has a unique role placed right above the ranks, but all other roles that can give permissions are above the bot. The worst the bot can do is giving out ranks to everyone or delete the ranks. It's not much of a harm.
"wait a sec you goddamn impatient little" bro has officially entered Disney villain arc
WHY ARE YOU GOD DAMN EVERYWHERE!!!
bro ate too much lasagn-wait i can't say that
I didn't block staff pings on my server as I have only about 400 members and I think people should ping us if something happens or so. Also, I manually changed permissions of my bots. None of them has admin or manage server perms. I use blargbot for moderation purposes, this bot isn't very popular but it's awesome and it comes with a great templating engine for tags and custom commands. I turned off the tag command for normal users, same for most of the commands, and custom commands are server-wide staff-managed so it doesn't matter here.
If you declare with your mouth, 'Jesus Is Lord' and believe in your heart that God raised him from the dead, you will be saved. -Romans 10:9
@@avangardismm I totally agree with your comment as of its unedited content, however, what is it supposed to bring in here, brother?
i just feel like everyone deserves to hear it, but it doesnt have anything to do with the video or comment@@toslaw9615
Going to now use these methods to irritate the biggest servers I can!.
Yeah I'm suprised you're only bringing this up now, it's been around for ages and won't lie it was always funny to me. Great video though!.
The actually good thing in this is that a while back you could spam invite links with the tag / remindme command , but now they removed the possibility to add invite links.
The legend says that tags in moderation bots will soon become so advanced that discord users will be able to kill the whole humanity of Discord using AI
Let's go new raid tutorial! Thanks it will be so useful ❤
💀
It’s probably been patched at this point. Once a zero-day gets discovered, the developer will work immediately to patch it, assuming developer is still maintaining the bot.
I like how NTTS LITERALLY tells people how to hack people, scam people, raid servers and THEN SAYS "discord needs better security"
let him cook
I like how NTTS LITERALLY tells people how to hack people, scam people, raid servers and THEN SAYS "discord needs better security"
I like how NTTS LITERALLY tells people how to hack people, scam people, raid servers and THEN SAYS "discord needs better security"
I like how NTTS LITERALLY tells people how to hack people, scam people, raid servers and THEN SAYS "discord needs better security"
And? Unless you're being sarcastic, videos like these can help raising awareness for server owners/folks who own the server, so that they can take measures towards such things.
I kinda miss those normal commands that you actually have to put on chat for most bots, I still prefer the slash commands but there is something with it that idk... nostalgia ig
These videos serve to convince me that I absolutely do not want to own a discord server. Thanks NTTS!
Just restrict your bots?
@@sonphantrung lol I know, I own a discord server and I do that. It was mostly just a joke because this video doesn’t make owning one very appealing.
A naked man fears no pickpocket.
He has other things to deal with anyways...
3:51 it’s 3:12 pm rn…
this could be solved with the bots utilizing automod api to scan the user input on those commands for the things that they can see in your automod rules. that's a cleaner solution than having to add your rules to both all of your bots AND automod, were these bots considering adding a global filtering for all the commands.
Yet another reason for rejecting general-purpose bots and rolling your own custom bot with just what you want/need.
Or just dont use a bot lol, go for other stuff like automod to filter and discord default messages to welcome people (or onboarding if youre lucky enough to not have server verification)
@@thisis_mudchute ... Discord builtins will never be a good enough replacement for bots.
Bots are far more customizable and not even that hard to make.
Plot twist, NTTSs editor is NTTS and he's bashing himself in this meta comentary.
the integrations menu is the best way to manage your slash commands by far, it's discord built in and you can choose what role, channel the command is available to.
and not having to go to any website
I just use Wick bot, these commands aren't on Wick and if they were there's systems in place so that you can send a maximum of like 3 tags in a row within like a couple seconds, any more than that and you're put in quarantine, works with other bots as well so if your bots end up in quarantine then you know you've got something broken there
Who's going to tell them?
that is terrifying for mods and everyone who moderates a server, i dont (im a chaos causer) but doin this makes their lives harder so im just gonna alert em
This video actually made Site-32, Asgard and Noctum aka some SCP discord servers which got raided by this
2:02 - Twitch has a similar issue with it's Automod if the blocked word is used in a quote command you could do quote (Insert number here for this example 25 because that's where I noticed it)
Tbh, just never give any bot Administrator. No bot needs it. It just needs the permissions if the other stuff.
7:10 there goes the advertisement money
2:44 Ain't no wa-- wait, why is that plane coming towards the towe- AAOOOAH GO- *boom*
i feel like i watched this video before.. in a dream maybe
ntts, why couldnt you make this loop or is there checks in place to prevent this:
> set Persons's afk to ping Person2
> set Person2's afk to ping Person1
In my server the blue one was in a meltdown
Thanks, as a pro epic giga chad sigma discord mod, I needed that.
* goes to dashboard * You are a hero once again. 💖
_the spinning meat has truly scarred me for life, i will never be able to see anything the same way ever again_
someone raided a server i am in with the afk command spam
it was a horrific
A little late on this one, my server was raided like this many months ago. A member used it to spam inappropriate photos of children in every channel.
Me: NTTS, You're fr just giving tutorials to destroy discord servers!
NTTS: It took you a while to realise ...🤔
NTTS casually explaining how to be a more annoying raider
What if you set the afk message to ping yourself while you are still afk?
I can't believe NTTS is against Garfield and lasagna.
Why on 9’11?
Fuck sake now I want lasagne, god damn it NTTS. Thanks for another great video!
can you do a video for all that security stuff and important things (discords auto mod)
Cool! Thanks for the advice.
Check every command of the bots on my server? Ha jokes on you I only have one bot and that is one I made myself
short answer: none of these can be used to raid
i once had a guy on a server i moderate use a carl command called /fun clap to post cheese pizza and some guy called him out for it (some of his messages got delted but the guy that called him out had msg logger) and he send the guy that called him out an human skeleton in an baththub with like organs and blood on the skeleteon just sitting in an baththub
Hold up wait a minute
Nuts watches Sound? I used to watch that guy all of the time.
Raiding is such a goofy thing. For some instances I love when it happens. Frankly discord should raid those cp servers and then delete them.
Wouldn't \@everyone work? Some bots might add a backslash in front of the @everyone ping, but if you'd type \@everyone would it cancel out the backslash?
The way he says "or just g-re"
We would be better off using a round catcher like the WW1 equivalent, but for bigger cases/bullets for space ships
what if your afk mention your alt that has an afk that @ you? can you create an infinite loop?
bro my friends server got raided by parrot bot and 777 i dont know what it is but he had afk and tags
you’re giving me too many ideas now
I as a Discord server moderator, I use Sapphire and ProBot.
I like lasagna
Mine gotten nuked
The nuke has been fixed but the server had to be deleted and remade
I love lasagna :)
If mentions are turned off when initializing bot client, it aint work.
You cannot ping @everyone because bots can tell in the payload of the message to not ping @everyone or @here
so we not gon talk abt the mr beast ad T_T
ts crazy cuz i js got cp bombed by those commands yh even fun clap went crazy i had to kick em mad fast
Y'know what to do then? Play RAID SHADOW LEGENDS
thx for the advice!
I wonder... can you use 2 afk users to constantly tag each other in a cycle?
most good bots don't respond to bot messages
@@calvindang7291no, its actually discord that makes it so the commands do not work if the author is a bot/webhook itself.
No. That will ne hell
nope, all reputable/trusted bots have checks for if the message is sent by an actual person so that exact situation won't happen
@@asfsadfsafdfasdf4964 i assume that reply was to me so to answer that discord does not allow bots to use commands i made an mistake in my previous response if the bot does not have checks then it can be a loophole
why did you change the thumbnail?
why are u don't use notsobot
LMAO my friend fell for the fake mr beast scam and they only stole 1 buckeroo, hes 13 btw 💀
Beef lasagna, beef lasagna, ntts nothing but a beef lasagna or something like that. You're welcome.
I have the privilege to program bots myself.
i used the afk thing to ping my friend 1 thousand times in a spam channel
Well there goes my sub and respect for this channel think before you clickbait
Or just do not have bots setup for normal users to use.
You do not need them for the _vast_ majority of cases.
and this is why i never use moderation bots lmao
yeah thats why you needa use my bot fr
"ephemeral" is pronounced "eff 'em, earl"
ntts's kiss is getting more and more depressing each video :(
did your egirl leave you?
I call my friend Lasagna. And now shes banned on this server 💀💀💀
i told u to make a video on zyx4 he larps the most limiteds every single day
already know its a good video
ntts i love u plz dont die to "natural causes" at the 23 of june in 2026
tbh i would just disable that module in the bot
I NEEDED TO KNOW THIS MY GOOD SIR
this is why i do my own bots 7:29
Update thingy! I'm famous now XD
Good vid!
noooo not the lasagna
haha i use it and spam wall text full of discord invite, in big text
How spam?
Lasagna.
yeah, i said it.
Fun fact: i'm the one who suggested this
I couldn’t care less
I Wana join the anti Garfield club
Can i have the honour of being invited to the anti garfield club?
I really don't like [REDACTED] it's just so meaty and the noodles are a really weird shape
how to ping @@everyone?
nuh uh, i have friends!
yeah duh of course you cant ping everyone and here. the devs of these bots arent totally brain dead and use `allowed_mentions` to make sure it doesnt ping people.
prepare to be doxxed
Lol big booty beam