It's important to note, for a lot of things these bots DO NOT need administrator permission, it requires extra work because you will have to more manually set em up, but you can control via permissions what the bot is and isn't allowed to do. I saw setup like that on a server that had owner's personal channels, Dyno was not given admin rights to not be in those channels.
I started coding discord bots myself recently, and I even have a custom invite command that creates an invite link for either: Full Admin rights, or just the neccessary rights that need to be there to use the commands. Oh, and also all the community enabled commands have their replies set to only be visible to the user that used the command
It's important to note, for a lot of things these bots DO NOT need administrator permission, it requires extra work because you will have to more manually set em up, but you can control via permissions what the bot is and isn't allowed to do. I saw setup like that on a server that had owner's personal channels, Dyno was not given admin rights to not be in those channels.
Btw, mentions don't work because the developers of the bots can disable mention by sending enabled_mentions to the Discord API, so even if the bot pings @everyone it won't mention anyone because "everyone" wasn't included in the allowed mentions, same thing for roles and users
Btw, mentions don't work because the developers of the bots can disable mention by sending enabled_mentions to the Discord API, so even if the bot pings @everyone it won't mention anyone because "everyone" wasn't included in the allowed mentions, same thing for roles and users
Fut fact : an @everyone exploit was found in Koya. It had a hanger game and when you tried a letter or a word it would repeat it. Someone did this in the koya server and pinged all of the tens of thousands ppl here, it was really funny seeing the chat being flooded like that.
I didn't block staff pings on my server as I have only about 400 members and I think people should ping us if something happens or so. Also, I manually changed permissions of my bots. None of them has admin or manage server perms. I use blargbot for moderation purposes, this bot isn't very popular but it's awesome and it comes with a great templating engine for tags and custom commands. I turned off the tag command for normal users, same for most of the commands, and custom commands are server-wide staff-managed so it doesn't matter here.
I know someone who used webhooks to mirror an ingame chat on a game he made into the discord. He did not sanitize for pings, and webhooks always have ping permissions.
It’s probably been patched at this point. Once a zero-day gets discovered, the developer will work immediately to patch it, assuming developer is still maintaining the bot.
(5:20) Don't give bots admin rights You have said it yourself. This is harmful. The developers might slip up. The bot might be hijacked. Only give necessary permissions.
Going to now use these methods to irritate the biggest servers I can!. Yeah I'm suprised you're only bringing this up now, it's been around for ages and won't lie it was always funny to me. Great video though!.
The legend says that tags in moderation bots will soon become so advanced that discord users will be able to kill the whole humanity of Discord using AI
I kinda miss those normal commands that you actually have to put on chat for most bots, I still prefer the slash commands but there is something with it that idk... nostalgia ig
The actually good thing in this is that a while back you could spam invite links with the tag / remindme command , but now they removed the possibility to add invite links.
And? Unless you're being sarcastic, videos like these can help raising awareness for server owners/folks who own the server, so that they can take measures towards such things.
the integrations menu is the best way to manage your slash commands by far, it's discord built in and you can choose what role, channel the command is available to. and not having to go to any website
Or just dont use a bot lol, go for other stuff like automod to filter and discord default messages to welcome people (or onboarding if youre lucky enough to not have server verification)
that is terrifying for mods and everyone who moderates a server, i dont (im a chaos causer) but doin this makes their lives harder so im just gonna alert em
this could be solved with the bots utilizing automod api to scan the user input on those commands for the things that they can see in your automod rules. that's a cleaner solution than having to add your rules to both all of your bots AND automod, were these bots considering adding a global filtering for all the commands.
I just use Wick bot, these commands aren't on Wick and if they were there's systems in place so that you can send a maximum of like 3 tags in a row within like a couple seconds, any more than that and you're put in quarantine, works with other bots as well so if your bots end up in quarantine then you know you've got something broken there
2:02 - Twitch has a similar issue with it's Automod if the blocked word is used in a quote command you could do quote (Insert number here for this example 25 because that's where I noticed it)
ntts, why couldnt you make this loop or is there checks in place to prevent this: > set Persons's afk to ping Person2 > set Person2's afk to ping Person1
i once had a guy on a server i moderate use a carl command called /fun clap to post cheese pizza and some guy called him out for it (some of his messages got delted but the guy that called him out had msg logger) and he send the guy that called him out an human skeleton in an baththub with like organs and blood on the skeleteon just sitting in an baththub
@@asfsadfsafdfasdf4964 i assume that reply was to me so to answer that discord does not allow bots to use commands i made an mistake in my previous response if the bot does not have checks then it can be a loophole
Wouldn't \@everyone work? Some bots might add a backslash in front of the @everyone ping, but if you'd type \@everyone would it cancel out the backslash?
It's important to note, for a lot of things these bots DO NOT need administrator permission, it requires extra work because you will have to more manually set em up, but you can control via permissions what the bot is and isn't allowed to do.
I saw setup like that on a server that had owner's personal channels, Dyno was not given admin rights to not be in those channels.
I started coding discord bots myself recently, and I even have a custom invite command that creates an invite link for either: Full Admin rights, or just the neccessary rights that need to be there to use the commands.
Oh, and also all the community enabled commands have their replies set to only be visible to the user that used the command
cool@@PFRamon
teach me sensei@@PFRamon
It's important to note, for a lot of things these bots DO NOT need administrator permission, it requires extra work because you will have to more manually set em up, but you can control via permissions what the bot is and isn't allowed to do. I saw setup like that on a server that had owner's personal channels, Dyno was not given admin rights to not be in those channels.
If you declare with your mouth, 'Jesus Is Lord' and believe in your heart that God raised him from the dead, you will be saved. -Romans 10:9
ah yes now I know how to raid my server! with zero people on because I have no friends! 😍
Oh look it's this edgy "I have no friends" thing again
@Savetion..you don’t even have any 🗿🗿🤣🤣💀💀
it's a joke
@Savetion..do you have a superior parent to get attention from?
Let me joinn
Btw, mentions don't work because the developers of the bots can disable mention by sending enabled_mentions to the Discord API, so even if the bot pings @everyone it won't mention anyone because "everyone" wasn't included in the allowed mentions, same thing for roles and users
and also theyre in an embed, which afaik doesnt allow mentions (at least not back 2 years ago when i made discord bots)
@@fxiqval Yeah mentions inside embeds doesn't mention still
Btw, mentions don't work because the developers of the bots can disable mention by sending enabled_mentions to the Discord API, so even if the bot pings @everyone it won't mention anyone because "everyone" wasn't included in the allowed mentions, same thing for roles and users
@@Theunicorn2012 what
If you declare with your mouth, 'Jesus Is Lord' and believe in your heart that God raised him from the dead, you will be saved. -Romans 10:9
Fut fact : an @everyone exploit was found in Koya. It had a hanger game and when you tried a letter or a word it would repeat it. Someone did this in the koya server and pinged all of the tens of thousands ppl here, it was really funny seeing the chat being flooded like that.
Fut fact lol
those devs are stupid af they can completely disable all mentions
i used that before
I am going to understand none of this but I will watch, enjoy, and stay until the end just to experience the love I haven't felt since my youth
@@lucasashworth2462because it's a spambot, you dummy
@@lucasashworth2462its a bot. Don't give them any attention
@@lucasashworth2462 yk its bot right ? right ?
@Savetion.. the meat riding is crazy
my friends server has the /afk command mwehehehehe 😈
I didn't block staff pings on my server as I have only about 400 members and I think people should ping us if something happens or so. Also, I manually changed permissions of my bots. None of them has admin or manage server perms. I use blargbot for moderation purposes, this bot isn't very popular but it's awesome and it comes with a great templating engine for tags and custom commands. I turned off the tag command for normal users, same for most of the commands, and custom commands are server-wide staff-managed so it doesn't matter here.
If you declare with your mouth, 'Jesus Is Lord' and believe in your heart that God raised him from the dead, you will be saved. -Romans 10:9
@@dizo-jp2td I totally agree with your comment as of its unedited content, however, what is it supposed to bring in here, brother?
i just feel like everyone deserves to hear it, but it doesnt have anything to do with the video or comment@@toslaw9615
"wait a sec you goddamn impatient little" bro has officially entered Disney villain arc
WHY ARE YOU GOD DAMN EVERYWHERE!!!
bro ate too much lasagn-wait i can't say that
I know someone who used webhooks to mirror an ingame chat on a game he made into the discord. He did not sanitize for pings, and webhooks always have ping permissions.
rookie mistake
@@hi-kt3qr But a fun one
Let's go new raid tutorial! Thanks it will be so useful ❤
💀
It’s probably been patched at this point. Once a zero-day gets discovered, the developer will work immediately to patch it, assuming developer is still maintaining the bot.
(5:20) Don't give bots admin rights
You have said it yourself. This is harmful. The developers might slip up. The bot might be hijacked. Only give necessary permissions.
Going to now use these methods to irritate the biggest servers I can!.
Yeah I'm suprised you're only bringing this up now, it's been around for ages and won't lie it was always funny to me. Great video though!.
The legend says that tags in moderation bots will soon become so advanced that discord users will be able to kill the whole humanity of Discord using AI
I kinda miss those normal commands that you actually have to put on chat for most bots, I still prefer the slash commands but there is something with it that idk... nostalgia ig
The actually good thing in this is that a while back you could spam invite links with the tag / remindme command , but now they removed the possibility to add invite links.
I like how NTTS LITERALLY tells people how to hack people, scam people, raid servers and THEN SAYS "discord needs better security"
let him cook
I like how NTTS LITERALLY tells people how to hack people, scam people, raid servers and THEN SAYS "discord needs better security"
I like how NTTS LITERALLY tells people how to hack people, scam people, raid servers and THEN SAYS "discord needs better security"
I like how NTTS LITERALLY tells people how to hack people, scam people, raid servers and THEN SAYS "discord needs better security"
And? Unless you're being sarcastic, videos like these can help raising awareness for server owners/folks who own the server, so that they can take measures towards such things.
Plot twist, NTTSs editor is NTTS and he's bashing himself in this meta comentary.
7:10 there goes the advertisement money
the integrations menu is the best way to manage your slash commands by far, it's discord built in and you can choose what role, channel the command is available to.
and not having to go to any website
This video actually made Site-32, Asgard and Noctum aka some SCP discord servers which got raided by this
These videos serve to convince me that I absolutely do not want to own a discord server. Thanks NTTS!
Just restrict your bots?
@@sonphantrung lol I know, I own a discord server and I do that. It was mostly just a joke because this video doesn’t make owning one very appealing.
Yet another reason for rejecting general-purpose bots and rolling your own custom bot with just what you want/need.
Or just dont use a bot lol, go for other stuff like automod to filter and discord default messages to welcome people (or onboarding if youre lucky enough to not have server verification)
@@mudchute4dlr ... Discord builtins will never be a good enough replacement for bots.
Bots are far more customizable and not even that hard to make.
A naked man fears no pickpocket.
He has other things to deal with anyways...
that is terrifying for mods and everyone who moderates a server, i dont (im a chaos causer) but doin this makes their lives harder so im just gonna alert em
Thanks, as a pro epic giga chad sigma discord mod, I needed that.
Tbh, just never give any bot Administrator. No bot needs it. It just needs the permissions if the other stuff.
i feel like i watched this video before.. in a dream maybe
this could be solved with the bots utilizing automod api to scan the user input on those commands for the things that they can see in your automod rules. that's a cleaner solution than having to add your rules to both all of your bots AND automod, were these bots considering adding a global filtering for all the commands.
2:44 Ain't no wa-- wait, why is that plane coming towards the towe- AAOOOAH GO- *boom*
* goes to dashboard * You are a hero once again. 💖
I just use Wick bot, these commands aren't on Wick and if they were there's systems in place so that you can send a maximum of like 3 tags in a row within like a couple seconds, any more than that and you're put in quarantine, works with other bots as well so if your bots end up in quarantine then you know you've got something broken there
Who's going to tell them?
2:02 - Twitch has a similar issue with it's Automod if the blocked word is used in a quote command you could do quote (Insert number here for this example 25 because that's where I noticed it)
_the spinning meat has truly scarred me for life, i will never be able to see anything the same way ever again_
3:51 it’s 3:12 pm rn…
Me: NTTS, You're fr just giving tutorials to destroy discord servers!
NTTS: It took you a while to realise ...🤔
NTTS casually explaining how to be a more annoying raider
The way he says "or just g-re"
Why on 9’11?
someone raided a server i am in with the afk command spam
it was a horrific
In my server the blue one was in a meltdown
thx for the advice!
ntts, why couldnt you make this loop or is there checks in place to prevent this:
> set Persons's afk to ping Person2
> set Person2's afk to ping Person1
A little late on this one, my server was raided like this many months ago. A member used it to spam inappropriate photos of children in every channel.
Fuck sake now I want lasagne, god damn it NTTS. Thanks for another great video!
Hold up wait a minute
Nuts watches Sound? I used to watch that guy all of the time.
Cool! Thanks for the advice.
LMAO my friend fell for the fake mr beast scam and they only stole 1 buckeroo, hes 13 btw 💀
ts crazy cuz i js got cp bombed by those commands yh even fun clap went crazy i had to kick em mad fast
Y'know what to do then? Play RAID SHADOW LEGENDS
Check every command of the bots on my server? Ha jokes on you I only have one bot and that is one I made myself
We would be better off using a round catcher like the WW1 equivalent, but for bigger cases/bullets for space ships
I can't believe NTTS is against Garfield and lasagna.
short answer: none of these can be used to raid
Raiding is such a goofy thing. For some instances I love when it happens. Frankly discord should raid those cp servers and then delete them.
so we not gon talk abt the mr beast ad T_T
yeah thats why you needa use my bot fr
i used the afk thing to ping my friend 1 thousand times in a spam channel
What if you set the afk message to ping yourself while you are still afk?
I love lasagna :)
already know its a good video
i once had a guy on a server i moderate use a carl command called /fun clap to post cheese pizza and some guy called him out for it (some of his messages got delted but the guy that called him out had msg logger) and he send the guy that called him out an human skeleton in an baththub with like organs and blood on the skeleteon just sitting in an baththub
you’re giving me too many ideas now
noooo not the lasagna
I NEEDED TO KNOW THIS MY GOOD SIR
I have the privilege to program bots myself.
Well there goes my sub and respect for this channel think before you clickbait
You cannot ping @everyone because bots can tell in the payload of the message to not ping @everyone or @here
I as a Discord server moderator, I use Sapphire and ProBot.
I wonder... can you use 2 afk users to constantly tag each other in a cycle?
most good bots don't respond to bot messages
@@calvindang7291no, its actually discord that makes it so the commands do not work if the author is a bot/webhook itself.
No. That will ne hell
nope, all reputable/trusted bots have checks for if the message is sent by an actual person so that exact situation won't happen
@@asfsadfsafdfasdf4964 i assume that reply was to me so to answer that discord does not allow bots to use commands i made an mistake in my previous response if the bot does not have checks then it can be a loophole
can you do a video for all that security stuff and important things (discords auto mod)
Mine gotten nuked
The nuke has been fixed but the server had to be deleted and remade
tbh i would just disable that module in the bot
Or just do not have bots setup for normal users to use.
You do not need them for the _vast_ majority of cases.
Beef lasagna, beef lasagna, ntts nothing but a beef lasagna or something like that. You're welcome.
GENIUS!!!
bro my friends server got raided by parrot bot and 777 i dont know what it is but he had afk and tags
Good vid!
If mentions are turned off when initializing bot client, it aint work.
ntts i love u plz dont die to "natural causes" at the 23 of june in 2026
Wouldn't \@everyone work? Some bots might add a backslash in front of the @everyone ping, but if you'd type \@everyone would it cancel out the backslash?
"ephemeral" is pronounced "eff 'em, earl"
i told u to make a video on zyx4 he larps the most limiteds every single day
and this is why i never use moderation bots lmao
ty for the information
what if your afk mention your alt that has an afk that @ you? can you create an infinite loop?
Lol big booty beam
this is why i do my own bots 7:29
Big boots beams
ntts's kiss is getting more and more depressing each video :(
did your egirl leave you?
I Wana join the anti Garfield club
why did you change the thumbnail?
as a garfield lover - I am so dissapointed and I unsubscribed. goodbye.
I really don't like [REDACTED] it's just so meaty and the noodles are a really weird shape
haha i use it and spam wall text full of discord invite, in big text
AYOOO early
why are u don't use notsobot
Lasagna.
yeah, i said it.
poggers!
cheese
Can i have the honour of being invited to the anti garfield club?
How spam?
lasagna