Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

A new project idea Kahoot Takeover! #24

Open
danielkp1234 opened this issue Feb 22, 2020 · 6 comments
Open

A new project idea Kahoot Takeover! #24

danielkp1234 opened this issue Feb 22, 2020 · 6 comments

Comments

@danielkp1234
Copy link

Hello @reteps This Project is really cool idiidk recently discovered a Kahoot takeover exploit. So if you need an idea it could be really cool to see a python/no GUI version of this.
Here is the commit for reference.
idiidk/kahoot-tools@72d3f52
you can test it on the omegaboot site

@theusaf
Copy link

theusaf commented Jan 28, 2021

This exploit has already been patched by Kahoot! Controllers must be disconnected from a game before they can reconnect to one. Also, the cid of the player is no longer sent in the question end event as part of the "nemesis."

@reteps
Copy link
Owner

reteps commented Jan 28, 2021

@theusaf Is there a clever way to search for a quiz now that the name is not given? It appears in your code you have built a database of every quiz, and are searching that database using the:

  • number of questions for each question
  • question response text

Is that correct?

@theusaf
Copy link

theusaf commented Jan 28, 2021

That is correct. The only way would be to filter through a premade list or take a user input about the quiz name to search.

@reteps
Copy link
Owner

reteps commented Jan 28, 2021

How did you end up building your list?

@theusaf
Copy link

theusaf commented Jan 28, 2021

I have a website that gets a lot of users. Every time the quiz end, and the uuid is sent to the client, it downloads and uploads the quiz to the database. This also happens when it finds a new quiz through user input.

@reteps
Copy link
Owner

reteps commented Jan 28, 2021

@theusaf I pinged you on discord, but on the quiz start, it does still give you the name...

{'cid': '1921529886',
 'content': '{"playerName":"peter","quizType":"quiz","playerV2":true,"hostPrimaryUsage":"student"}',
 'gameid': '2828454',
 'host': 'play.kahoot.it',
 'id': 14,
 'type': 'message'}
{'quizQuestionAnswers': [4, 4, 4, 4, 4],
 'quizTitle': 'Halloween ',
 'quizType': 'quiz'}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants