The 2 step problem

[zjc9022OLD]

Teachers at my school have recently found out about the 2 step verification option on kahoot games. I figured, how hard can it really be to crack?

Info:

• The combos are comprised of 4 colors
• No Repeat colors
• 4 Colors long
• 24 possible combos

Without actually hacking the game itself, there are two solutions that I see:

1. Have the user type out the combo every 7 seconds (as the combo changes). -This could get annoying as only so many bots would be able to enter in these 7 second spans.

2. Send 24 bots, each with 1 possible combo (effectively trying all combos). We would then need to figure out which bot gained access into the game. From this, we spam bots with that combo until 1 is rejected. When one is rejected, we know the combo has run out. We would then start over and find the combo again, then send the bots again. Repeat until all bots are in.

If someone could check this out and give feedback on this, it would be much appreciated. If someone could also attempt this (if my theory is correct) it would be awesome to be the first tool to crack this system.

Thanks, SovietReptilian

[r1161177]

Same here! But here I have loaded some JavaScript on the teacher's computer to turn off the button and disable it whenever the site is loaded, as well as disabling right click and F12, meaning no one can enable it. :P

Anyway, I completely agree. @unixpickle created this awesome tool, he surely has the knowledge to bypass this little annoying security measure.

[zjc9022OLD]

Awesome, could you send me what you use? (I have 0 clue how to use the injection feature)

[PixelHir]

+1

[VegitoSsjb]

Im doing kahoot rn