A new project idea Kahoot Takeover!

[danielkp1234]

trafficstars

Hello @reteps This Project is really cool idiidk recently discovered a Kahoot takeover exploit. So if you need an idea it could be really cool to see a python/no GUI version of this. Here is the commit for reference. https://github.com/idiidk/kahoot-tools/commit/72d3f525d17189739e7ad19f8d924bd8cbb96ddb you can test it on the omegaboot site

[theusaf]

This exploit has already been patched by Kahoot! Controllers must be disconnected from a game before they can reconnect to one. Also, the cid of the player is no longer sent in the question end event as part of the "nemesis."

[reteps]

@theusaf Is there a clever way to search for a quiz now that the name is not given? It appears in your code you have built a database of every quiz, and are searching that database using the:

• number of questions for each question
• question response text

Is that correct?

[theusaf]

That is correct. The only way would be to filter through a premade list or take a user input about the quiz name to search.

[reteps]

How did you end up building your list?

[theusaf]

I have a website that gets a lot of users. Every time the quiz end, and the uuid is sent to the client, it downloads and uploads the quiz to the database. This also happens when it finds a new quiz through user input.

[reteps]

@theusaf I pinged you on discord, but on the quiz start, it does still give you the name...

{'cid': '1921529886',
 'content': '{"playerName":"peter","quizType":"quiz","playerV2":true,"hostPrimaryUsage":"student"}',
 'gameid': '2828454',
 'host': 'play.kahoot.it',
 'id': 14,
 'type': 'message'}
{'quizQuestionAnswers': [4, 4, 4, 4, 4],
 'quizTitle': 'Halloween ',
 'quizType': 'quiz'}