Seriveri ya Serveri cyangwa Igitero Cyabaturage: Byangiritse Bot Token, Webhook Spam, hamwe na Audit-Log Recovery¶

Kubyuka ibihumbi @everyone kumenyesha pings no kuvumbura ko seriveri yawe ya ** Discord, seriveri yimikino, cyangwa subreddit ** iri munsi yigitero gikora ** gihujwe cyangwa cyikora "seriveri nuke" ** nikintu cyihuta cyihuta cya digitale. Mu masegonda 30 kugeza kuri 90, konte yubuyobozi yabangamiwe, icyapa cyibwe, cyangwa urubuga rwasohotse rushobora gusiba imiyoboro myinshi, guhagarika imbaga y’ibihumbi by’abanyamuryango bemewe, kuzuza seriveri yawe ukoresheje imiyoboro y’amafaranga, cyangwa ugashyiraho amategeko akomeye ya serivisi (harimo amashusho adahuje ibitekerezo cyangwa ibikoresho byo gusambanya umwana, CSAM) yagenewe gukurura ibyuma byikora ** Discord Trust & Umutekano wuzuye-seriveri yo kurangiza ** ibuza konti ya nyiri seriveri nayo. Niba igitero cyohereje CSAM itemewe, iterabwoba, cyangwa iterabwoba ryugarije umubiri, menyesha ibimenyetso ukoresheje ako kanya kumenyekanisha ibintu bitemewe kandi byangiza na gutunganya abana, guhuza inyamaswa, na raporo ya NCMEC kuyobora, no kugisha inama isi yose nimero yihutirwa ububiko niba hari umuntu ufite ibyago byumubiri.

Guhagarika igitero mugihe cyamasegonda 60 bisaba gusuzuma ** niyihe mubice bitatu byibasiye ** ikubita umuryango wawe: 1. ** Kwinjira hanze-Wave / Umukoresha-Bot Raid: ** Amajana ya konte yabakoresha yikora yuzuye binyuze mumutumire cyangwa URL yubusa icyarimwe kumuyoboro wa spam na DM. 2. ** Igitero cyo Gutera Urubuga: ** Igitero wabonye umuyoboro wa Webhook URL (discord.com/api/webhooks/...) imyuzure @everyone pings hamwe nuburiganya butarinze kwinjira muri seriveri cyangwa kugaragara kurutonde rwabanyamuryango. 3. ** Ubwumvikane Bwimbere mu Gihugu ("Server Nuke"): ** Ikimenyetso cyumuyobozi uyobora (Local Storage / leveldb ikimenyetso cyibwe na infostealer malware) cyangwa igenamigambi ryabigenewe rya Token ()Bot ...) hamwe na Administrator uruhushya rurashimuswe, kurasa DELETE /channels na PUT /bans API ihamagarira umuvuduko wimashini.

Aka gatabo gatanga protocole yukuri-amasegonda 60-yihutirwa, gahunda iteganijwe yo gukuraho Bot Tokens yangiritse mbere yo gutera imigeri ya rogue, gukuramo ibizamini bya Audit Logic, hamwe na ** Discord Trust & Safety (dis.gd) ** na ** Reddit Mod Inkunga ** inzira yo kugarura.

Kora ubu¶

1. ** Kora "Kuruhuka Ubutumire" na "Kuruhuka DMs" imbere muri menu y'ibikorwa byumutekano wa Discord ako kanya (bifata amasegonda 5). Ibi bihita bihagarika buri butumire butumirwa hamwe na URL yawe yihariye ya Vanity kureka konte nshya yibitero byinjira mugihe uhagaritse abanyamuryango-banyamuryango bose badasabye Ubutumwa butaziguye.
2. ** Andika Administrator, Manage Channels, Manage Roles, Manage Webhooks, na Ban Members Uruhushya rwa @everyone uruhare KANDI uhereye kubakozi bawe / inshingano za bot. ** Fungura ** Igenamiterere rya seriveri -> Inshingano -> Uruhushya rusanzwe (@everyone) ** -> kanda hasi hanyuma ukande ** Siba Uruhushya ** (cyangwa uhindure neza OFF Send Messages, Mention @everyone, @here, and All Roles, Attach Files, Embed Links, na Create Public/Private Threads). Noneho kanda ** Moderator / Admin / Inshingano za Bot ** munsi yuruhare rwa nyirayo hanyuma uhindure by'agateganyo OFF Administrator, Manage Channels, na Ban Members guhagarika umuyoboro ukora-gusiba nuke yapfuye mumirongo yayo.
3. ** Reba Server Settings -> Audit Log BWA MBERE no kuyungurura kubikorwa (Delete Channel, Ban Member, Create Webhook, Update Role) kugirango umenye konti nyayo cyangwa bot. ** Ntuzigere ukeka uwayobora cyangwa bot ikora nuke. ** Igenzura rya ** ryerekana umukinnyi nyawe ukora guhamagara API mugihe nyacyo.
4. ** Niba Custom Bot iri nuking ya seriveri, REBA Bot yayo Yacitse mumurongo wa Discord Developer Portal (discord.com/developers/applications) cyangwa kwiyambura Uruhare rwarwo MBERE YUKO gutera cyangwa kubuza bot. ** Niba igihangano cyangiritse gifite the Administrator cyangwa Manage Server uruhushya, cyangwa niba umuyobozi wumuntu wangiritse akiri imbere muri seriveri, gusa gukubita bot bituma inyandiko yibitero ihita yongera gutumira bot cyangwa gukomeza kurasa API guhamagara kugeza ikimenyetso cyangwa uruhare byambuwe.
5. ** Niba ubutumwa bwa spam buvuga APP cyangwa BOT kuruhande rwizina ridasanzwe ritari murutonde rwabanyamuryango, fungura Server Settings -> Integrations -> Webhooks hanyuma usibe Webhook zose zitamenyekanye ako kanya. ** Spam ya Webhook ntabwo ituruka kumukoresha muri seriveri yawe; isunikwa binyuze kuri HTTP POST ibyifuzo kuri URL ya Webhook yamenetse kandi irashobora guhagarikwa gusa mugusiba Webhook imbere ** Kwishyira hamwe -> Webhooks ** (cyangwa gukuraho Manage Webhooks uruhushya).
6. ** Bika Ubutumwa Ihuza, ID ID (18-to-19-digit Snowflake ID). nyirayo.

Igiti cyemezo: Gusuzuma no guhagarika igitero cyibikorwa byabaturage mumasegonda 60¶

Menya imwe muri enye zubukanishi bwibitero bibaho nonaha hanyuma ukore urutonde rwukuri rwica-rwihishwa hepfo.

flowchart TD
    RaidStart["Igikorwa Cyiza cya Seriveri, Umwuzure wa Spam, cyangwa Gusiba Umuyoboro Byamenyekanye"] --> PauseInvites["INTAMBWE 1: Kanda Izina rya Serveri -> Ibikorwa byumutekano -> Gushoboza 'Gutumira Ubutumire' & 'Kuruhuka DMs'"]
    PauseInvites --> AuditCheck["INTAMBWE 2: Fungura seriveri Igenamiterere -> Kugenzura Logi kugirango umenye Umukinnyi"]
    AuditCheck --> VectorType{"Igenzura ry'Ubugenzuzi cyangwa Ikiganiro byerekana iki?"}
    VectorType -->|"Amajana ya Konti Nshya Yinjira & Spamming Chat / DMs"| JoinRaid["IHURIRO RIDASANZWE: Wandike @Buriwese 'Kohereza Ubutumwa', 'Ongeraho Idosiye', & 'Vuga @Buriwese' -> Kuzamura urwego rwo kugenzura kuri 'Hejuru (Terefone Yemewe)' -"]
    VectorType -->|"Ubutumwa Bwanditseho 'APP / BOT' Spamming @Buriwese, Umukinnyi Atari kurutonde rwabanyamuryango"| WebhookRaid["IGITERO CYA WEBHOOK: Gufungura Seriveri Igenamiterere -> Kwishyira hamwe -> Urubuga - - Gusiba Urubuga Rwose rutamenyekanye -> Ubugenzuzi Ninde wabashizeho muri Logite y'ubugenzuzi"]
    VectorType -->|"Moderateur cyangwa Admin Konti Yumuntu Isiba Imiyoboro / Kubuza Abakoresha"| ModCompromised["ICYEMEZO CY'UBUYOBOZI BUKORESHEJWE: Kurura Uruhare rw'Uruhare Munsi Yanyu cyangwa Uruhushya Rwa Uruhare -> Kubuza Konti Yabigenewe - - Kugira Mod Wipe Yanduye PC & Kugarura Ijambobanga"]
    VectorType -->|"Konti ya Bot ni Imiyoboro-Gusiba Imiyoboro, Kurema Inshingano, cyangwa Kubuza"| BotNuke["BIKORESHEJWE BOT TOKEN NUKE: Uruhushya rwa Strip Bot ruyobora Uruhare rwa Zeru -> Kugarura Bot Token mu mbuga yabatezimbere (discord.com/abateza imbere) -> Kick / Ban Bot & Revoke OAuth2"]
    JoinRaid --> EvidenceClean["INTAMBWE 3: Menyesha inyandiko zose zitemewe n'amategeko ukoresheje In-App Raporo Yambere -> Koresha Ubutumwa Bwinshi bwo Gukuraho / Kugarura"]
    WebhookRaid --> EvidenceClean
    ModCompromised --> EvidenceClean
    BotNuke --> EvidenceClean

Igice cya 1: Amasegonda 60-isegonda yo gufunga protocole (Guhagarika kuva amaraso)¶

Iyo igitero cyangwa seriveri nuke itangiye, abayobora abantu ntibashobora guhagarika intoki konte byihuse kuruta Python yikora cyangwa Go inyandiko yohereza ibyifuzo hamwe na Discord REST API (50 requests per second). Ugomba guca ubushobozi bwabateye API kurwego rwa seriveri.

1. Nigute ushobora guhagarika Umukoresha-Bot Ihuze Raid mumasegonda 15¶

Niba amagana ya konte yo guta yinjira muri seriveri yawe hamwe numuyoboro wuzuye cyangwa mass-DMing abanyamuryango bawe nibinyoma "Free Nitro" cyangwa "Crypto Airdrop" guhuza amafi: 1. ** Imbarutso "Ibikorwa byumutekano" (Pause Invites + Pause DMs): ** - Kanda ** Izina rya Serveri yawe yamanutse ** (hejuru ibumoso) -> ** Ibikorwa byumutekano **. - Reba ** Kuruhuka Gutumira ** (garuka "Invites are currently paused for this server" kumurongo uwo ariwo wose wo hanze cyangwa URL yubusa kanda) na ** Kuruhuka DMs ** (ibuza abatari inshuti muri seriveri gutangiza ubutumwa bushya butaziguye). 2. ** Kuzamura urwego rwo kugenzura kugeza ntarengwa (Highest - Phone Verified): ** - Jya kuri ** Igenamiterere rya Serveri -> Gushiraho Umutekano -> Kugenzura Urwego ** -> kanda ** Guhindura ** -> hitamo ** Isumbabyose (Ugomba kugira terefone yemejwe kuri konti yabo ya Discord) **. - Byinshi mubitero byibasiye botnets bishingiye kubimenyetso bya imeri ihendutse ($0.01 per token) kuruta konti yagenzuwe na SMS. Guhindukira kuri ** Isumbabyose ** ihita ihagarika ibimenyetso bya bot bitagenzuwe bimaze kuba muri seriveri kohereza ubutumwa cyangwa ubutumwa bwabanyamuryango. 3. ** Funga @everyone Uruhushya rwumuyoboro kwisi yose: ** - Jya kuri ** Igenamiterere rya Seriveri -> Inshingano -> Uruhushya rusanzwe (@everyone) **. - Hindura: - Send Messages na Send Messages in Threads - Create Public Threads na Create Private Threads - Attach Files na Embed Links - Add Reactions na Use External Emoji / Stickers - Mention @everyone, @here, and All Roles - * Kugenzura Byibanze Kubyerekeye Uruhushya Rurenze: * Niba umuyoboro runaka (nka #general cyangwa #chat) ifite ** Icyatsi kibisi (Allow) ** kurenga kuri @everyone uruhare rwa Send Messages imbere ** Hindura Umuyoboro -> Uruhushya , guhindura uruhare rwa seriveri yisi yose ntabwo ** izafunga uwo muyoboro. Kumuyoboro uwo ariwo wose uracyazunguruka hamwe na spam, kanda ahanditse ** Gear (Guhindura Umuyoboro) -> Uruhushya -> @everyone hanyuma ushireho Send Messages Kuri ** Umutuku X (Deny) ** cyangwa gushoboza ** Slowmode (6 hours) **.

2. Nigute wahagarika igitero cya "Webhook Spam" mumasegonda 15¶

Benshi mubafite seriveri bafite ubwoba batekereza ko seriveri yabo yose yibwe kuko umukoresha witwa "Server Nuke Syndicate" hamwe na APP (kera BOTikirango kirimo @everyone Inshuro 5 isegonda muri #announcements kandi ntishobora gukanda-iburyo no guhagarikwa. - ** Impamvu udashobora guhagarika Webhook: ** Urubuga rwa Discord Webhook ni iherezo ryoroshye rya HTTP (https://discord.com/api/webhooks/{webhook.id}/{webhook.token}). Umuntu wese ubonye iyo URL (haba kuberako umuyobozi wabigaragaje kubwimpanuka yabigaragaje kumurongo wa Live, akayitanga mububiko rusange bwa GitHub, cyangwa afite konte yabangamiwe no gukora imwe) arashobora kohereza imitwaro itagira imipaka ya JSON kuri uwo muyoboro utarinze no kuba umunyamuryango wa seriveri yawe ya Discord. - ** Uburyo bwo kuyica ako kanya: ** 1. Fungura ** Igenamiterere rya Seriveri -> Kwishyira hamwe -> Urubuga **. 2. Reba kurutonde rwa Webhooks urebe umuyoboro buriwese yerekeza. 3. Kanda kuri buri Webhook itaramenyekana hanyuma ukande ** Gusiba Webhook ** (cyangwa ukande ** Gukoporora Webhook URL ** kugirango ubanze winjire, hanyuma ** Siba Webhook ). Spam ihagarika milisegonda Webhook isibwe. 4. Ako kanya fungura ** Igenamiterere rya seriveri -> Kugenzura Log - - Akayunguruzo kubikorwa: Create Webhook kubona * iyo * moderi cyangwa konte ya bot yaremye iyo Webhook. Niba konte ya moderator yarashizeho Webhook saa tatu za mugitondo batabizi, ** icyo cyerekezo cya Discord session token cyangiritse **: kwiyambura uruhare rwabo hanyuma uhite wirukana konti yabo.

Igice cya 2: Guhagarika "Serveri Nuke" y'imbere (Moderator Moderator na Bot Token Token)¶

**Administrator, Manage Channels, Manage Roles, Ban Members, Manage Webhooks) kandi ikoresha inyandiko yo gusenya byikora (Nuker). Mu masegonda 10, inyandiko iranyura kuri buri muyoboro ID kugirango isibe inyandiko zose hamwe nijwi ryamajwi, ikora imiyoboro mishya 250 yitwa #nuked-by-xxx, gusiba inshingano zose za seriveri, no kwirukana ibyifuzo-kubuza kurutonde rwabanyamuryango.

1. Uruhare rw'Uruhare rw'Amategeko (Impamvu ushobora cyangwa udashobora guhagarika Admin mubi)¶

Ubwumvikane buke bukurikiza vertical ** Uruhare Inzego ** imbere ** Igenamiterere rya Seriveri -> Inshingano **: - ** Nyirubwite Serveri (ufite ikamba) ** yicaye hejuru yinshingano zose muri seriveri kandi arashobora kwambura cyangwa guhagarika umuntu uwo ari we wese cyangwa bot utitaye kumurongo wabigizemo uruhare. - ** Umuyobozi wese udafite nyirubwite ** arashobora guhindura GUSA, kwambura, cyangwa kubuza abakoresha na bots uruhare rwabo rwicaye ** kumubiri munsi ** uruhare rwabo rukomeye murutonde rwa ** Serveri -> Inshingano ** kurutonde. - Niba uruhare rwa bot ruyobowe ninshingano ziyobowe kuri #2 kurutonde rwinshingano hamwe nabayobozi bakuru bawe bizewe bicaye #3, ** Abayobozi Bakuru bawe badafite imbaraga zo gukubita bot cyangwa guhindura inshingano zayo mugihe wowe (nyiri seriveri) uryamye. **

2. Urukurikirane nyarwo rwo gutesha agaciro Bot Nuke¶

Niba ** Igenzura rya ** ryerekana konte ya bot (yaba seriveri yawe yihariye cyangwa ikindi gice cyagatatu cyarenze) isiba imiyoboro cyangwa ibuza abanyamuryango, kurikiza iri teka ryintambwe 3:

3. Nigute abayobora bibye ibimenyetso byabo bya Discord (Kandi kuki 2FA itabihagarika)¶

Ni ukubera iki umuyobozi wawe wizewe cyane, ufite ** SMS na Authenticator App 2FA ** yashoboye kuri konti yabo ya Discord, yahise atangira nuking seriveri saa yine za mugitondo? - ** Uburyo Discord Authentication Tokens ikora: ** Umukiriya wa desktop ya Discord (yubatswe kuri Electron / Chromium) hamwe na mushakisha y'urubuga bibika ibimenyetso byumukoresha byemeza imbere mububiko bwabitswe ()%AppData%\discord\Local Storage\leveldb kuri Windows). - ** Inzira 3 Zibwe-Ubujura: ** 1. ** Umukino wibinyoma Beta / Kugenzura Malware (Lumma, RedLine, Blank Grabber, Emerald Stealer): ** Itsinda ryibitero DMs umuyobozi wawe abasaba kugerageza umukino wumuhinde cyangwa gusuzuma ubujurire .zip dosiye. Porogaramu yangiza ikuramo moderi ya disiketi ya Discord token kandi akenshi ihindura desktop ya desktop yumukiriya wa JavaScript yaho (core.asar / index.js inshinge) ku buryo niyo umuyobozi uhindura ijambo ryibanga, porogaramu ya Trojanized Discord ihita yohereza * ikimenyetso * gishya kuri webhook yibitero. 2. ** "Ikimenyetso" cyangwa "Umujyanama" (F12. Ctrl + Shift + I konsole, isoma ikimenyetso kizima uhereye kumutwe. 3. ** Fake "Captcha Verification Bot" QR Code Scan (Wick / DoubleCounter Clones): ** Abagabye igitero bohereza ubutumwa bwo kugenzura seriveri mpimbano basaba umuyobozi kuri ** "Sikana iyi kode ya QR hamwe na porogaramu yawe ya Discord Mobile App kugira ngo umenye ko uri umuntu."

Igice cya 3: Kongera umuryango (Subreddit) Kugarura no Kwiyunga Moderator Kugarura¶

Niba uhinduye umuryango ** Reddit umuryango (r/YourSubreddit.

1. Ako kanya Subreddit Gufunga & Rogue Moderator Gukuraho¶

1. ** Reba Moderator Hierarchy (Mod Tools -> Moderators): **
2. Kimwe na Discord, Reddit ishyira mu bikorwa ** hejuru-hasi yubukuru bukuru ** kurutonde rwa Moderator ukurikije itariki buri moderi yongeyeho.
3. Umuyobozi wese ufite Everything.
4. Niba umuyobozi wangiritse yanditswe kurutonde ** munsi ** wowe: uhite ufungura ** Ibikoresho bya Mod -> Abayobora -> Guhindura **, kanda agashusho k'ikaramu kuruhande rwa moderi wangiritse, reba Everything, hanyuma ukande ** Kuraho **.
5. ** Kugenzura Mod Log (https://www.reddit.com/r/YOURSUBREDDIT/about/log): **
6. Shungura ** Moderi yo Kugereranya ** ukoresheje izina ryumuyobozi wangiritse (Moderator kumanuka) hamwe na ** Igikorwa ** (banuser, wikirevise, editsettings, removelink, removemoderator).
7. ** Kora Reddit "Igenzura ryabantu" na "Akayunguruzo k'umutekano" Mugihe cya Brigade yo hanze: **
8. Fungura ** Mod Mod ibikoresho -> Akayunguruzo k'umutekano -> Igenzura ry'abantu **.
9. Shiraho ** Kohereza Urwego ** na ** Urwego rwibitekerezo ** kugeza kuri ** Ntarengwa / Ikomeye ** (ihita ifata ibitekerezo namakuru yoherejwe nabakoresha bafite karma mbi ya subreddit, konti nshya, hamwe nabakoresha batinjiye mumuryango mbere yuko igitero gitangira).
10. Emera Akayunguruzo ka ** na ** Kubuza Evasion Filter ** (ikoresha Reddit yimbere yimbere yintoki hamwe na IP telemetrie kugirango ikureho auto-post kuri konti nshya yashizweho ya konte yababujijwe).
11. ** Ongeraho Ako kanya AutoModerator Amategeko yo gufunga byihutirwa: **
12. Fungura ** Mod Mod ibikoresho -> Automod (wiki/config/automoderator) ** hanyuma wandike iri rembo ryihutirwa hejuru kugirango ufate cyangwa ukureho inyandiko / ibitekerezo byose kuri konte itarengeje iminsi 30 cyangwa hamwe na karma yo munsi ya subreddit:

    ---
    # EMERGENCY RAID LOCKDOWN RULE
    type: any
    author:
        account_age: "< 30 days"
        combined_subreddit_karma: "< 10"
        satisfy_any_threshold: true
    action: filter
    action_reason: "Emergency Raid Lockdown: New account or low subreddit karma [{{match}}]"
    ---
    

2. Niki Wakora Niba "Top Moderator" ya Subreddit yawe Yangiritse (Kandi Yakuyeho Mod Team)¶

Niba konte ya ** # 1 Top Moderator ** kuri subreddit yawe yashimuswe (cyangwa yaguzwe na crypto / onlyfans spam syndicat) hanyuma ikuraho itsinda ryose ryemewe ryemewe: 1. ** Ntugerageze brigade yawe yibwe subreddit yawe. ** 2. Saba uwakabiri-hejuru yakuweho moderi wohereze ** Modmail kuri r/ModSupport** (https://www.reddit.com/message/compose?to=/r/ModSupport&subject=Compromised+Top+Moderator+Emergency+Rollback). 3. ** Kuki r/ModSupport Modmail numuyoboro wa Escalation yemewe: ** Bitandukanye nibyanditswe rusange kuri r/redditrequest (aribyo bigabanijwe subreddits), **r/ModSupport Modmail ikoreshwa muburyo butaziguye na Reddit Community Admins ** ifite ibikoresho byimbere ** Mod Igikorwa cyo Kugarura **. 4. Tanga: - Izina nyaryo rya subreddit (r/...); - Izina ryumukoresha wa Top Moderator wangiritse (u/...); - Igihe nyacyo cya UTC mugihe itsinda ryemewe ryemewe ryahanaguwe kandi wiki / kuruhande / pin byangiritse; - Amashusho yerekana amatangazo yo gukuraho Modmail. 5. ** Ibyo Reddit Admins Yagaruye: ** Reddit Admins ifunga konti ya Top Moderator yangiritse, subiza inyuma ibyakuweho byose, kubuza, guhindura wiki, no gusiba ibyakozwe byakozwe mugihe cyo kumena idirishya, hanyuma usubize umuyobozi usigaye cyane kurokoka kuri #1 Top Moderator intebe.

Igice cya 4: Nyuma yo kugarurwa nyuma yigitero: Ese gusiba imiyoboro idahwitse hamwe nabakoresha babujijwe na misa birashobora kugarurwa?¶

Igitero kimaze guhagarikwa hanyuma ikariso ya bot / moderator ikurwaho, ba nyiri seriveri bahura nukuri kubikorwa bikomeye byububiko bwa Discord:

1. Inkunga idahwitse igarura imiyoboro yasibwe cyangwa ubutumwa nyuma ya seriveri Nuke?¶

• ** Ukuri kwa Tekiniki Ukomeye: ** Bitandukanye na YouTube (ituma amashusho ya videwo yasibwe mububiko bukonje muminsi 14 kugeza 30) cyangwa Reddit (aho inyandiko "zavanyweho" zihishe gusa kandi Admin ashobora gusubiza inyuma Mod Log), ** mugihe umuyoboro wasibwe kuri Discord (DELETE /channels/{id}), Discord's Cassandra / ScyllaDB base baseza burundu ikintu cyumuyoboro hamwe nubutumwa bwose bwarimo imbere. **
• ** Discord Icyizere & Umutekano NTIBISHOBORA kugarura imiyoboro yasibwe, inshingano zasibwe, cyangwa amateka yubutumwa bwasibwe nyuma yumuyobozi wangiritse cyangwa bot nukes seriveri. **
• ** Icyo Discord Trust & Umutekano BISHOBORA Kugarura: ** Niba seriveri yawe yose yarangiye / yarahagaritswe na Discord Trust & Umutekano ** kubera ko abagizi ba nabi banditse ibintu bibi kugirango bagushireho, cyangwa niba konte yawe ya ** Serveri ** yarashimuswe hanyuma uwagabye igitero yimurira nyirubwite (Transfer Ownership) kuri konti yabo bwite, batanga ** Konti Yangiritse / Tike ya nyiri seriveri kuri https://dis.gd/request** yemerera abakozi ba Discord kwimura ** Serveri Nyiri Crown ** gusubira kuri konte yawe yagaruwe.

2. Nigute Twubaka Imiyoboro & Inshingano hamwe nabanyamuryango Babujijwe Misa Byihuse¶

1. ** Kubaka Imiyoboro & Inshingano (Inyandikorugero ya Serveri & Ibikurikira): **
2. Niba warabyaye mbere kavukire ** Discord Server Inyandiko (Server Settings -> Server Template.
3. ** Byinshi-Guhindura Misa Kubuza Binyuze mu Igenzura: **
4. Niba bot yangiritse yabujije abanyamuryango 500 bemewe mugihe cyiminota 2, fungura ** Igenamiterere rya Serveri -> Kugenzura Log - - Akayunguruzo kubikorwa: Ban Member -> Akayunguruzo kubakoresha: [The Compromised Bot/Mod]**.
5. Buri cyabujijwe kwinjira muri Audit Log yerekana indangamuntu nyayo na timestamp yuwahohotewe yabujijwe muri iryo dirishya ryiminota 2. Urashobora kubambura intoki ukoresheje ** Igenamiterere rya Serveri -> Ibibujijwe **, cyangwa ugakoresha itegeko ryizewe ryerekana ibicuruzwa (nka Carl-bot, Dyno, cyangwa gusoma byoroshye imirongo 15 yubuyobozi guild.audit_logs(action=discord.AuditLogAction.ban) Muyunguruzi Kuri entry.user.id == COMPROMISED_ACTOR_ID) guhita uhamagara guild.unban(entry.target) kuri buri munyamuryango wemewe wabujijwe nuwo mukinnyi wikigoryi.
6. ** Kurandura Ubutumwa bwibihumbi Ibihumbi udasiba Umuyoboro: **
7. Niba umuyoboro wuzuyemo ubutumwa bwa spam 2000 bwibitero, ** ntusibe kandi uhindure umuyoboro ** keretse niba ushaka gutakaza ubutumwa bwemewe bwemewe, ubutumwa bwanditse, hamwe na webhook.
8. Ahubwo, koresha Discord yubatswe muri ** Iburyo-Kanda Raider -> Kubuza -> Gusiba Amateka y'Ubutumwa: Previous 24 Hours (cyangwa Previous 7 Days) **, ihita isukura ubutumwa bwose bwoherejwe nuwo mutero kuri buri muyoboro muri seriveri icyarimwe.
9. Kuri konte ya spam-konte nyinshi, koresha igenamigambi rigereranijwe /purge itegeko (up to 100 to 1,000 messages under 14 days old ukoresheje Discord's Bulk Gusiba API iherezo).

Igice cya 5: Umwiryane uhoraho & Umuganda wo kugaba-Gukomera Kugenzura¶

Seriveri yawe imaze guhagarara, shiraho izi ** esheshatu zubatswe muri zeru-zeru zububiko bwububiko ** kugirango rero hatabaho igitero cyo hanze cya botnet cyangwa mudasobwa imwe yanduye PC ntishobora na rimwe kongera seriveri yawe:

1. Gushoboza Disikuru "AutoMod" Akayunguruzo kavukire (Server Settings -> Safety Setup -> AutoMod)¶

Kavukire kavukire ** AutoMod ** irahagarika ikanahagarika imitwaro yo kugaba ibitero * mbere yuko * ubutumwa butangwa mubiganiro cyangwa bigatera kumenyesha gusunika kuri terefone zabanyamuryango: - ** Hagarika Spam yo Kuvuga: ** Shiraho ** Imipaka ntarengwa ** kuri **5 (cyangwa 3) imvugo idasanzwe kuri buri butumwa **, hanyuma uhitemo ** Guhagarika Ubutumwa + Umunyamuryango wigihe ((1 Hour cyangwa 24 Hours) + Kohereza Alert **. Ibi bituma bidashoboka kumubiri kugaba igitero kubakoresha 30 mubutumwa bumwe. - ** Hagarika Ibikekwa bya Spam & Amagambo asanzwe yamamaye: ** Toggle kuri lisiti zombi zubatswe. - ** Ijambo ryibanze ryibanze & Regex Amategeko yuburiganya: ** Ongeraho itegeko rya AutoMod ryigenga rihagarika uburyo rusange bwuburiganya: - Ijambo ryibanze: *discord.gift*, *steamcommunity.com/gift*, *free nitro*, *airdrop claim*, *t.me/*, *whatsapp.com*. - Imiterere ya regex ifata ubutumire butumirwa: (?:https?://)?(?:www\.)?(?:discord\.(?:gg|io|me|li)|discordapp\.com/invite)/[a-zA-Z0-9-]+ (gusonera inshingano z'abakozi bawe).

2. Gushoboza "Gusaba 2FA kubikorwa bya Moderator" (Server Settings -> Safety Setup -> Permissions)¶

• Gufungura ** Seriveri-Yagutse 2FA Ibisabwa ** ihatira API ya Discord kugenzura ko umukoresha wese ugerageza gusiba imiyoboro, kubuza abanyamuryango, gucunga inshingano, cyangwa gucunga webhooks afite Authentication ebyiri yibikorwa kuri konti yabo.
• ** Icy'ingenzi, kwiyambura Administrator uruhushya rutangwa ninshingano zose za Moderator zabantu na 99% bya Bots: **
• ** Amategeko ya Zahabu yumutekano muke: ** Hafi ya ** ntamuntu uyobora abantu kandi nta na bot-intego rusange yigeze ikenera Administrator Hindura ON. **
• Kubera iki? Uwiteka Administrator guhinduranya inkunga yuzuye bypass hejuru ya buri muyoboro ufunze, inkunga Manage Webhooks, inkunga Manage Server, kandi ureke mod yangiritse mod nuke seriveri mumasegonda 3.
• Ahubwo, tanga Moderator yumuntu wawe ** gusa ** Kick Members, Ban Members, Moderate Members (Timeout), na Manage Messages. Bahe ** zeru ** uruhushya rwo Delete Channels, Manage Roles, cyangwa Manage Webhooks. Niba PC ya moderi yanduye virusi-yibye, uwibasiye ** ntashobora gusiba umuyoboro umwe kandi ntashobora gukora webhook imwe **.

3. Shyira mu bikorwa "Ikarito ya Bot & Igipimo cyo Kurwanya Nuke"¶

• ** Kugenzura Server Settings -> Integrations Ukwezi: ** Kuraho buri muzika udakoreshwa, bot-umukino muto, cyangwa igenzura wongeyeho mumyaka yashize. Mubitero byinshi byingenzi byamateka, seriveri ya bot yataye igice cya gatatu cyaciwe na ba hackers bakoresheje ibitotsi Administrator uruhare rwo kugaba ibitero 10,000 icyarimwe.
• ** Ntuzigere Utanga Administrator Iyo Gutumira Bot: ** Iyo wemereye bot ukoresheje URL ya OAuth2 (discord.com/oauth2/authorize?...&permissions=8), menya ko permissions=8 ni bito byuzuye Administrator. Kuramo Administrator kuri OAuth ikibazo hanyuma utange gusa uruhushya rwihariye bot ikeneye.
• ** Kurwanya Kurwanya Kurwanya Nuke: ** Kuri seriveri nini (10,000+ members), shyira igenzura ** Anti-Nuke Igipimo-Limiter Bot ** (nka * Wick *) kuri ** hejuru yUruhare rwawe (#1 Position iburyo munsi ya nyirayo wa seriveri) ** yashyizeho kuburyo niba umuyobozi wese cyangwa bot asiba imiyoboro irenga ** 2 mumasegonda 60 ** cyangwa akabuza abakoresha barenga ** 5 mumasegonda 60 **, umurinzi wambuye uruhare rwabakinnyi kuri zeru muri milisegonda 200.

Inomero zihutirwa zo mukarere hamwe na protocole yikigo¶

Iyo ibitero byabaturage byambutse ** icyaha cyicyaha cyicyaha, kwambura abantu, iterabwoba, cyangwa gukwirakwiza ibikoresho byo gusambanya umwana (CSAM) **, kurikiza ayo masezerano yemewe ako kanya:

• ** Raporo ya CSAM Yisi yose (Ibiteganijwe): ** Ntuzigere ukuramo, kubika, cyangwa kwerekana amashusho arimo CSAM. Koresha Discord's muri porogaramu ** Raporo Ubutumwa -> Kwangiza umwana cyangwa Ibikoresho byo Guhohotera Igitsina ** (byohereza seriveri nyayo ya attachment hash hamwe na IP yohereza IP mu buryo butaziguye ** Ikigo cyigihugu gishinzwe kubura no gushakisha abana, NCMEC CyberTipline **), cyangwa raporo kuri **report.cybertip.org (1-800-843-5678) ** muri Amerika cyangwa ** Fondasiyo yo kureba kuri interineti (iwf.org.uk) ** mu Bwongereza / EU. Reba gutunganya abana, guhuza inyamaswa, na raporo ya NCMEC.
• ** Amerika: ** Menyesha ibitero byo kwambura abantu, iterabwoba, cyangwa ibitero bya DDoS ku kigo cya ** FBI gishinzwe ibirego kuri interineti (FBI)ic3.gov) **. Niba umuyobozi ucuramye kandi akangishwa no kohereza ibintu byihutirwa ("Swatting"), hamagara abapolisi baho ** biro byihutirwa byoherejwe byihutirwa ** uhite ushyira ** Icyapa cya ** Swatting / Premise Alert Note ** kuri aderesi yawe. Kubyago byumubiri byihuse, hamagara ** 911 **.
• ** Kanada: ** Menyesha ibikorwa byo kwambura interineti no kugaba ibitero bitemewe mu kigo cya ** cyo muri Kanada gishinzwe kurengera abana (cybertip.ca) **, ikigo cya ** cyo muri Kanada gishinzwe kurwanya uburiganya (1-888-495-8501) , cyangwa abapolisi baho ( 911 ** mubihe byihutirwa).
• ** Ubwongereza: ** Menyesha ikoreshwa rya mudasobwa nabi no kwambura interineti kuri ** Ibikorwa by'uburiganya (actionfraud.police.uk, 0300 123 2040) ** no kumenyesha ihohoterwa ritemewe na ** Internet Watch Foundation (iwf.org.uk) ** cyangwa ** Umuyobozi mukuru (ceop.police.uk) **. Numero yihutirwa: ** 999 ** cyangwa ** 112 ** (abapolisi badasanzwe: ** 101 **).
• ** Umuryango w’ubumwe bw’ibihugu by’i Burayi: ** Menyesha imvugo y’inzangano zitemewe, ibikubiye mu iterabwoba, cyangwa ibitero bya CSAM ukoresheje igihugu cyawe ** INHOPE (inhope.org) ** umurongo wa telefoni n’umupolisi ishami ryibyaha byibasiye amategeko ya ** EU Serivisi ishinzwe serivisi (DSA) **. Numero yihutirwa: ** 112 **.
• ** Ositaraliya na Nouvelle-Zélande: ** Muri Ositaraliya, menyesha Komiseri wa ** eSafety (ihohoterwa rikabije rya interineti cyangwa ibikoresho byo kugaba ibitero mu buryo butemewe n'amategeko)esafety.gov.au) ** na ** RaporoCyber (cyber.gov.au, 1300 292 371) **. Muri Nouvelle-Zélande, raporo kuri ** Netsafe (netsafe.org.nz, 0508 638 723) **. Inomero zihutirwa: ** 000 ** (Ositaraliya), ** 111 ** (New Zealand).
• ** Ubuhinde na Aziya-Pasifika: ** Mu Buhinde, tanga raporo yihuse kuri ** Urubuga rw’igihugu rushinzwe gutanga amakuru ku byaha bya cyber (cybercrime.gov.in, umurongo wa telefone 1930) **. Reba ububiko bwuzuye kuri nimero yihutirwa.

Ibibazo bikunze kubazwa¶

Kuki @everyone spam pings iracyagaragara nyuma yo kubuza abateye no gufunga @everyone uruhushya?¶

Iyo ubutumwa bwa spam bukomeje kwisuka kumuyoboro hamwe na **`APP`** cyangwa **`BOT`** tagi kuruhande rwizina ryukoresha kandi ntushobora gukanda iburyo-ukoresha kugirango ubabuze, uwagabye igitero akoresha ** Discord Webhook ** aho gukoresha konti yabakoresha. Webhooks ntabwo igaragara kurutonde rwabanyamuryango ba seriveri kandi wirengagize `@everyone` uruhare rwohereza ubutumwa kubuza. Fungura ** Igenamiterere rya Seriveri -> Kwishyira hamwe -> Urubuga rwa interineti **, shakisha Webhook yerekana umuyoboro wanduye, hanyuma ukande ** Gusiba Urubuga **. Nyuma, reba ** Igenamiterere rya Seriveri -> Kugenzura Log ** yungurujwe na `Create Webhook` kugirango ubone moderi cyangwa bot yaremye.

Niba nkubita cyangwa nkabuza bot yangiritse mugihe cya seriveri nuke, nigute ishobora kongera kwonyine?¶

Ikibuto ntigishobora gutumira ubwacyo, ** ariko ** niba igitero nacyo cyatesheje agaciro icyerekezo cya disikuru ya disikuru (cyangwa yahawe) `Manage Server` / `Administrator` kuruhare rwihishwa rwa kabiri mugihe bot yari ifite ubugenzuzi), inyandiko yibitero ikoresha icyo kimenyetso cyabantu kugirango yongere yemere URL ya OAuth2 itumira URL (`permissions=8`) gutandukana-isegonda nyuma yo kuyitera. Mugukuraho uruhushya rwa bot uruhushya kuri zeru mbere, gusubiramo Bot Token imbere `discord.com/developers/applications`, no kugenzura ** Igenzura rya ** kubikorwa bitemewe byahawe abanyamuryango, ukata bot hamwe na vector yayo yongeye gutumira.

Inkunga ya Discord irashobora gusubiza inyuma seriveri yanjye no kugarura imiyoboro yanjye yasibwe niba hacker yarayikuyemo?¶

Oya. Bitandukanye na Reddit cyangwa YouTube, Discord ntigumana amashusho yimiyoboro yasibwe, inshingano zasibwe, cyangwa ubutumwa bwasibwe kuri seriveri yububiko. Rimwe a `DELETE /channels/{id}` Icyifuzo cya API gikorwa na konti ifite `Manage Channels` cyangwa `Administrator` uruhushya, iyo miyoboro n'amateka yubutumwa bwabo byahanaguwe burundu. Ariko, niba hacker yimuye ** Serveri nyirubwite ** kure ya konte yawe yangiritse, cyangwa niba seriveri yawe yarahagaritswe kubeshya na Trust & Umutekano mugihe cyo kugaba igitero, gutanga itike kuri `dis.gd/request` munsi ya ** Hacked Konti / Serveri Nyirubwite ** yemerera Inkunga yo kugarura ikamba rya nyiri seriveri.

Konti ya moderi yashimuswe na infostealer hanyuma nuked seriveri yacu. Nibyiza kongera kubihindura nyuma yo guhindura ijambo ryibanga?¶

Ntuzigere usubiza uruhushya rwo kuyobora abakozi babangamiwe gusa kuko bahinduye ijambo ryibanga kuri mudasobwa imwe. Ikirangantego kigezweho token-abajura (`Lumma`, `Blank Grabber`, `RedLine`) shyiramo imizigo ya JavaScript idahwitse muri porogaramu ya desktop ya Discord `index.js` / `core.asar` dosiye muri `%AppData%\discord`. Ako kanya moderator asubira muri iyo PC idahanaguwe, inyandiko yatewe yiba ikimenyetso gishya kandi ikohereza kuri hacker. Saba umuyobozi gukora USB isukuye USB isukuye mbere yo kubaha inshingano.

Nigute narinda seriveri yanjye uburiganya bwa "Fake QR Code Verification" ishimuta abayobora nabanyamuryango?¶

Wigishe abakozi bawe nabaturage ko ** nta byemewe byemewe byo kugenzura (`Wick`, `DoubleCounter`, `Pandez`, `Sledgehammer`) izigera igusaba gusikana kode ya QR ukoresheje kamera ya porogaramu igendanwa ya Discord. Hugura abayobora kugirango uhagarike DM zinjira mubatari inshuti munsi ya ** Igenamiterere ryabakoresha -> Ibirimo & Imibereho -> Uruhushya rwimibereho ** kandi ntuzigere usuzuma kode ya QR cyangwa ngo ukore an `.exe`/`.zip` dosiye yoherejwe muri DM.

Kuyobora¶

• Gufata konte mbuga nkoranyambaga no kwiba
• Kumenyekanisha ibintu bitemewe kandi byangiza kumurongo
• Gutunganya abana, guhuza inyamanswa, gutandukanya abana bato, no gutanga raporo ya NCMEC
• Gutotezwa kumurongo, doxxing, no gukoresha interineti
• Umuyoboro wumuremyi washimuswe na crypto scam livestreams
• Inomero zihutirwa

Inkomoko nubuyobozi¶

• ** Discord Icyizere & Umutekano n'Ikigo gishinzwe umutekano (discord.com/safety): ** * Kurinda Seriveri Yawe Ibitero (Safety Setup, AutoMod, Raid Protection, na Security Actions: Kuruhuka Ubutumire / Kuruhuka DMs) * na * Uruhushya rwubuyobozi hamwe no kwemeza ibintu bibiri-byemewe kubayobora *.
• ** Inyandiko ziteza imbere abaterankunga (discord.com/developers/docs): ** * OAuth2 Urupapuro rwabemereye Bot, Ibendera ryuruhushya ruto (Administrator = 0x8), Umutekano wa Webhook, hamwe no gukuraho Token *.
• ** Ongera ufashe ubufasha & Moderator Inkunga (support.reddithelp.com / r/ModSupport): * *
• ** Ikigo gishinzwe umutekano n’ibikorwa remezo (CISA) & Ikigo cy’igihugu gishinzwe umutekano wa cyber (NCSC): **asar tampering), na OAuth / Isomo rya Token Hijacking *.
• ** Ikigo cyigihugu gishinzwe kubura no gushakisha abana (NCMEC) & Fondasiyo ya interineti (IWF): * *