├── README.md └── main.go /README.md: -------------------------------------------------------------------------------- 1 | ## StumbleExploitGo 2 | a simple exploit that can give you unlimited trophies. 3 | 4 | reference (https://github.com/revan-ar/bot-stumble) 5 | 6 | ![image](https://cdn.discordapp.com/attachments/961293295886147675/986579408800321556/Screenshot_1.png) 7 | 8 | Tutorial Video( i Skiped When i Play Stumble )(https://www.mediafire.com/file/isjwgxpttbs3g0r/vidma_recorder_16062022_211853.mp4/file) 9 | 10 | How To Use? 11 | 12 | Mobile Phone : 13 | 14 | 1. Run HTTPCANARY 15 | 2. Open stumble guys. 16 | 3. Play the game until you reach at least round 2/3 17 | 4. If You Eleminated Or Win Dont Claim Prize 18 | 5. Goto HTTPCANARY 19 | 6. And Click At Link https://hkitkabackend.eastus.cloudapp.azure.com:5010/round/finishv2 20 | 7. Goto Request 21 | 8. Copy Value 22 | 9. And Goto Ur Platform For Running A Exploit 23 | 24 | Termux: 25 | 26 | 1. apt update && apt upgrade 27 | 2. apt install git 28 | 3. pkg install golang 29 | 4. git clone https://github.com/iSholvedNV/StumbleExploitGo 30 | 5. cd StumbleExploitGo 31 | 6. go run main.go 32 | 33 | PC : 34 | 1. git clone https://github.com/iSholvedNV/StumbleExploitGo 35 | 2. Open stumble guys. 36 | 3. Play the game until you reach at least 1 win. 37 | 4. When you playing make sure to sniff by using **HTTP Debuger/Wireshark**. 38 | 5. View the packets (**DO NOT CLAIM THE PRIZE or the exploit won't work**) 39 | 6. Copy the packets 40 | 7. Take the json part and paste it in Tools 41 | 8. Run the program (go run main.go) 42 | -------------------------------------------------------------------------------- /main.go: -------------------------------------------------------------------------------- 1 | package main 2 | 3 | import ( 4 | "fmt" 5 | "io/ioutil" 6 | "log" 7 | "net/http" 8 | "strconv" 9 | "strings" 10 | ) 11 | 12 | func request(url string) { 13 | resp, err := http.Get(url) 14 | if err != nil { 15 | log.Fatalln(err) 16 | } 17 | 18 | defer resp.Body.Close() 19 | 20 | body, err := ioutil.ReadAll(resp.Body) 21 | if err != nil { 22 | log.Fatalln(err) 23 | } 24 | 25 | log.Println(body) 26 | } 27 | 28 | func input(text string) string { 29 | fmt.Print(text) 30 | 31 | // var then variable name then variable type 32 | var first string 33 | 34 | // Taking input from user 35 | fmt.Scanln(&first) 36 | 37 | return first 38 | } 39 | 40 | func parseResponse(text string) { 41 | trophy := strings.Split(text, `"SkillRating":`)[1] 42 | trophy = strings.Split(trophy, ",")[0] 43 | crown := strings.Split(text, `"Crowns":`)[1] 44 | crown = strings.Split(crown, ",")[0] 45 | username := strings.Split(text, `"Username":`)[1] 46 | username = strings.Split(username, ",")[0] 47 | 48 | fmt.Printf("\rUsername : %s | Trophy : %s | Crown : %s", username, trophy, crown) 49 | } 50 | 51 | func requestWithHeader(url string, token string) { 52 | client := &http.Client{} 53 | req, _ := http.NewRequest("GET", url, nil) 54 | 55 | req.Header.Set("Host", "kitkabackend.eastus.cloudapp.azure.com:5010") 56 | req.Header.Set("use_response_compression", "true") 57 | req.Header.Set("authorization", token) 58 | 59 | res, _ := client.Do(req) 60 | body, err := ioutil.ReadAll(res.Body) 61 | if err != nil { 62 | } 63 | 64 | if res.StatusCode == 200 { 65 | parseResponse(string(body)) 66 | } 67 | if res.StatusCode == 401 { 68 | fmt.Printf("\n[401] Failed Maybe Auth Key Expired Or Wrong?") 69 | } 70 | if res.StatusCode == 403 { 71 | fmt.Printf("\n[403] Your Account Has Ben Banned From Server") 72 | } 73 | if res.StatusCode == 501 { 74 | fmt.Printf("\n[501] Failed") 75 | } 76 | } 77 | 78 | func main() { 79 | fmt.Printf("Simple Stumble Duplicate Crown & Tropy") 80 | fmt.Printf("\nThis Tools Made By Ryns And Recoded By iSholved!") 81 | fmt.Printf("\nReference : Revan AR, KipasGTS, NixSey, GalvinLoL") 82 | fmt.Printf("\nThanks To : Nevolutions Reborn Team For Support!") 83 | 84 | fmt.Printf("\n\n\n╔═╗╔╦╗╦ ╦╔╦╗╔╗ ╦ ╔═╗ ╔╦╗╦ ╦╔═╗╦ ╦╔═╗╔═╗╔╦╗╔═╗\n") 85 | fmt.Printf("╚═╗ ║ ║ ║║║║╠╩╗║ ║╣ ║║║ ║╠═╝║ ║║ ╠═╣ ║ ║╣ \n") 86 | fmt.Printf("╚═╝ ╩ ╚═╝╩ ╩╚═╝╩═╝╚═╝ ═╩╝╚═╝╩ ╩═╝╩╚═╝╩ ╩ ╩ ╚═╝") 87 | 88 | round := input("\n\n 0. Eleminated \n1. Round 1\n2. Round 2\n3. Round(Winner) 3\n Input Your Round: ") 89 | token := input("Enter your authorization: ") 90 | thread := input("Threads :") 91 | thrd, _ := strconv.Atoi(thread) 92 | url := "http://kitkabackend.eastus.cloudapp.azure.com:5010/round/finishv2/" + round 93 | 94 | for i := 0; i < thrd; i++ { 95 | go func() { 96 | for { 97 | requestWithHeader(url, token) 98 | } 99 | }() 100 | } 101 | for { 102 | requestWithHeader(url, token) 103 | } 104 | } 105 | --------------------------------------------------------------------------------