# Webhook Spam

Detect and neutralise abusive webhooks used for spam or nuke attacks.

## How Webhook Abuse Works

Attackers who gain access to a channel webhook token can send unlimited messages impersonating any user. This is commonly used in nuke attacks to flood channels with spam, slurs, or phishing links.

## Protection Features

- **Webhook Rate Limiting:** Automatically rate-limits webhook messages. If a webhook exceeds the threshold, it is paused.

- **Webhook Creation Monitoring:** Alerts when new webhooks are created and logs the creator.

- **Auto-Delete Abuse:** Detects spam patterns from webhooks and deletes offending messages instantly.

- **Webhook Quarantine:** Suspicious webhooks are disabled and require manual re-approval from a server admin.

> If you detect an ongoing webhook attack, navigate to Discord Server Settings -> Integrations and delete the compromised webhook. Exorion will also attempt to do this automatically.