One of my friends has created a malware that works through a Discord bot: if launched, it’ll log the cookie files of your browser and some other files from different kinds of programs (not exactly sure if that’s how it works, but that’s not the point) and, using a bot, it’ll send them to the creator. Recently I’ve realised that he also sent me the code used in the malware, where I found a link that led to the webhook of that bot (discord.com/api/webhooks).

I tried using LiveBot to log into the bot, but I was greeted with the “invalid token format” error. After doing some research, I’ve realised that it’s a webhook token, not a bot token, which got me wondering: what can I do with the webhook token?