
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@gabrielmaialva33/discord-video-stream
Advanced tools
Experiment for making video streaming work for discord self bots
Fork: Discord-video-experiment
This project implements the custom Discord UDP protocol for sending media. Since Discord is likely change their custom protocol, this library is subject to break at any point. An effort will be made to keep this library up to date with the latest Discord protocol, but it is not guranteed.
For better stability it is recommended to use WebRTC protocol instead since Discord is forced to adhere to spec, which means that the non-signaling code is guaranteed to work.
go live
, or webcam video)What I implemented and what I did not.
Extensions supported by Discord (taken from the webrtc sdp exchange)
"a=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level"
"a=extmap:2 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time"
"a=extmap:3 http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01"
"a=extmap:4 urn:ietf:params:rtp-hdrext:sdes:mid"
"a=extmap:5 http://www.webrtc.org/experiments/rtp-hdrext/playout-delay"
"a=extmap:6 http://www.webrtc.org/experiments/rtp-hdrext/video-content-type"
"a=extmap:7 http://www.webrtc.org/experiments/rtp-hdrext/video-timing"
"a=extmap:8 http://www.webrtc.org/experiments/rtp-hdrext/color-space"
"a=extmap:10 urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id"
"a=extmap:11 urn:ietf:params:rtp-hdrext:sdes:repaired-rtp-stream-id"
"a=extmap:13 urn:3gpp:video-orientation"
"a=extmap:14 urn:ietf:params:rtp-hdrext:toffset"
Ffmpeg is required for the usage of this package. If you are on linux you can easily install ffmpeg from your distribution's package manager.
If you are on Windows, you can download it from the official ffmpeg website: https://ffmpeg.org/download.html
Install the package, alongside its peer-dependency discord.js-selfbot-v13:
npm install @dank074/discord-video-stream@latest
npm install discord.js-selfbot-v13@latest
Create a new client, and patch its events to listen for voice gateway events:
import { Client } from 'discord.js-selfbot-v13'
import { Streamer } from '@dank074/discord-video-stream'
const streamer = new Streamer(new Client())
await streamer.client.login('TOKEN HERE')
Make client join a voice channel and create a stream:
await streamer.joinVoice('GUILD ID HERE', 'CHANNEL ID HERE')
const udp = await streamer.createStream()
Start sending media over the udp connection:
udp.mediaConnection.setSpeaking(true)
udp.mediaConnection.setVideoStatus(true)
try {
const res = await streamLivestreamVideo('DIRECT VIDEO URL OR READABLE STREAM HERE', udp)
console.log('Finished playing video ' + res)
} catch (e) {
console.log(e)
} finally {
udp.mediaConnection.setSpeaking(false)
udp.mediaConnection.setVideoStatus(false)
}
examples/basic/src/config.json
:
"token": "SELF TOKEN HERE",
"acceptedAuthors": ["USER_ID_HERE"],
config.json
with your accepted authors ids, and your self tokennpm run build
npm run start
for go-live
$play-live <Direct video link>
or for cam
$play-cam <Direct video link>
for example:
$play-live http://commondatastorage.googleapis.com/gtv-videos-bucket/sample/BigBuckBunny.mp4
Yes, just send the media packets over both udp connections. The voice gateway expects you to signal when a user turns on
their camera, so make sure you signal using client.signalVideo(guildId, channelId, true)
before you start sending cam
media packets.
No, Discord blocks video from bots which is why this library uses a selfbot library as peer dependency. You must use a user token
FAQs
Experiment for making video streaming work for discord self bots
The npm package @gabrielmaialva33/discord-video-stream receives a total of 241 weekly downloads. As such, @gabrielmaialva33/discord-video-stream popularity was classified as not popular.
We found that @gabrielmaialva33/discord-video-stream demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.