How to modify this for loco trivia

[shreyas24cool]

Hey I have sniffed the traffic for loco trivia. Please tell how to modify this script for loco trivia. It will be more helpful if you provide the modified script.

[shreyas24cool]

@yapal GET /v1/contests/ HTTP/1.1 User-Agent: Dalvik/2.1.0 (Linux; U; Android 6.0; Lenovo A7020a48 Build/MRA58K) X-APP-VERSION: 60 X-PLATFORM: 1 Device-Id: f542af7761bd429 Authorization: Bearer Ql7xwaHIItRhjySAjrCX6JmwsKXjL Host: api.getloconow.com Connection: Keep-Alive Accept-Encoding: gzip

[shreyas24cool]

@yapal I use ssl proxy sniffer which I downloaded from play store

[Exaphis]

@shreyas24cool Thanks for posting the traffic here. I will be creating a new repository for the Loco Trivia version soon.

[PoonamChohdhary1991]

Can you help me modify it for iQ live trivia app

[shreyas24cool]

@PoonamChohdhary1991 Can you please sniff loco trivia app traffic and post it

[PoonamChohdhary1991]

[shreyas24cool]

@Exaphis so it seems that first we will have to connect to loco websocket live that is http://realtime.getloconow.com/socket.io/?E10=3&transport=polling then we have to copy the sid which is given in response and go to websocket http://realtime.getloconow.com/socket.io/?E10=3&sid="provided sid"&transport=websocket
And then get the questions Can you write script which would do this

[PoonamChohdhary1991]

@yapal I used Charles.

[PoonamChohdhary1991]

Anyone able to modify it for brain baazi or loco or iQ live? Please help how to do it

[PoonamChohdhary1991]

@yapal Have you installed certificate in your phone

[U-r-Unknown]

Yup. I did. I sniffed traffic but got something different. Did u sniff wen game was live

[shreyas24cool]

@Exaphis it seems that first we will have to connect to loco websocket live that is http://realtime.getloconow.com/socket.io/?E10=3&transport=polling then we have to copy the sid which is given in response and go to websocket http://realtime.getloconow.com/socket.io/E10=3&sid="providedsid"&transport=websocket And then get the questions Can you write script which would do this

[nanip9997]

@shreyas24cool did you get the bearer token and user id if you sniffed them please post them

[Pranav-In11]

What kind of modifications would be required for making it work for loco??

[shreyas24cool]

@Pranav-In11 it seems that first we will have to connect to loco websocket live that is http://realtime.getloconow.com/socket.io/?E10=3&transport=polling then we have to copy the sid which is given in response and go to websocket http://realtime.getloconow.com/socket.io/E10=3&sid="providedsid"&transport=websocket And then get the questions Can you write script which would do this

[Pranav-In11]

I really don't know how to do 😅 I asked this question because I thought how much time @Exaphis will take to modify it

[Exaphis]

Does anybody have the full JSON responses from both the initial connection and the websocket connection to Loco Trivia?

[shreyas24cool]

@Exaphis this is the zip file which contains the saved charles session of loco trivia when game was. You wil get everything you need from this loco.zip

[Pranav-In11]

Any Progress?? @Exaphis

[Exaphis]

You can view my progress on https://github.com/Exaphis/HackLoco-Trivia/. It is not completed yet.

[Pranav-In11]

How do I get bearer token & ID I have installed chales proxy,but if don't know how to get that token I have also tried some YouTube video but my device doesn't shows internet connection after using this proxy. Please help me😅😅😅@Exaphis Thank you!

[Exaphis]

Yep, haven't been committing any changes yet. Currently working on Loco's socket.io protocol.

[vaibhavk97]

i have been observing this app for a while now , cant seem to get to the api exactly from where the questions come. have you guys been successful in getting that link ? i did not see it anywhere in the charles proxy file that was attached here.

[Exaphis]

@U-r-Unknown Yes, I have seen it. However, I have no experience in JS and have no clue how to use the JS client in Python. The others I have tried (and have been posted to the issue in the Loco repo) don't seem to work for socket.io 2.

[vaibhavk97]

i have some experience with JS . Can you share some logs so that i can get an idea . I have already unpinned the certificates of the app to allow packet sniffing in burp. thanks

[U-r-Unknown]

@Exaphis Please check this out. https://github.com/veo-labs/python-socketio-client

@Exaphis. Here is one more https://pypi.org/project/socketIO-client-nexus/

[U-r-Unknown]

Is this socket.io2 https://pypi.org/project/socketIO-client-2/0.7.1/

[vaibhavk97]

@U-r-Unknown i will see if I can scrape it

[U-r-Unknown]

R u getting questions bro@exaphis. Any progress?

[U-r-Unknown]

There may be changes in app. Can any1 sniff traffic during live game n post here( with Charles or any other sniffers)

[Exaphis]

@U-r-Unknown Still a work in progress. Seems like many socket.io clients for Python are not well maintained, encountering some issues that are posted in Github but not resolved.

[U-r-Unknown]

Tnx for reply bro. Can u post the error so that any1 here can try to solve

[Exaphis]

Sure. The main problem I am encountering is nexus-devs/socketIO-client-2.0.3/issues/2. In the meantime, I will be porting this over to Java to use socket.io's official client there.

[U-r-Unknown]

Is Java working bro?

[SimronJ]

@PoonamChohdhary1991 Hey , can you tell me how did you got that traffic to show?

[U-r-Unknown]

@Exaphis bro u r not online these days. Reply once u come online bro

[U-r-Unknown]

Bro any updates? Waiting for ur reply. Plz help

[ssahaxd]

If anyone has Brain Baazi's Charles session please post.

[n4y4nd3k4]

@shreyas24cool @PoonamChohdhary1991 @U-r-Unknown @nanip9997 u guys have bearer and user id of loco?

[35w4r]

any one give python script for practice loco automatically playing. if enter 20 practice loco games ,then select whatever answers option and finally get some coins...please provide me

[35w4r]

loco 4.2.6 version app sniffing with python script send me link.

[35w4r]

practice loco coins game python script is available please put on?

[35w4r]

Hey I have sniffed the traffic for loco trivia. Please tell how to modify this script for loco trivia. It will be more helpful if you provide the modified script.

please provide loco coins game python script

[35w4r]

Does anybody have the full JSON responses from both the initial connection and the websocket connection to Loco Trivia?

please send python script for loco coins game.

[35w4r]

trivia game google ocr https://openload.co/f/sRDpE6QmXHo/Trivia_OCR_Search-master.zip

[MaheshMahi19]

@Exaphis I Just tried to connect loco websocket using headers and sid but its Just connecting and closing itself... any help....? :)

[MaheshMahi19]

Hoo.. I got it. its working fine for me Loco Trivia WebSocket