How I Hacked Shuttl 🚎
Tags: security, android, startup, productivity
Published: 2021-11-23 10:56:04

## How it started 🔥
I was in my 2nd-year @delhitechnicalcampus. College timing is 9 to 4 pm, and I have to rush to pick public transport at 7 pm. It took 2 hours to reach college in between route of Noida to Pari chowk. I used this new service **Shuttl**. 

**Shuttl** - They provide Transport service from Noida Sector 37 to Pari Chowk. **_I am inspired by this startup_** as they provide 30 rupee journey costs in 10 rupees and with AC minibus.
![image](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/h5z8ummk7wo0tm1ccq60.png)
We have to book a ride through their app & the technology they are using in their app is mind-blowing. I have to say, I am really amazed by the startup. 

## What made to do tricks 🪄

So, for the first ride, they provide a free Coupon Ride, which is one time applicable. BUT why so and why don't we apply again so? For this, I made a Dual app and login with my secondary number, but that code is not valid for the second number. What the Hackman!
![image7](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/u5r2rg2hkgs99w5ezgb4.jpg)
 

### Here's a story start 👨‍💻

I need to figure out how's this thing working and why can't I apply code in my secondary number account.

After suffering on Google, I learned that they are storing EMI and device info on their sever and both EMI numbers are linked, so if one coupon is applied on one number, then another is already claimed by it. So no extra coupon can be used.

My work is to do something by which the app doesn't know about its EMI number and device info. So, I did Spoofing and made the Shuttl MOD version. I Spoofed Emi and device info **_(
Spoofing is the act of faking the wrong information to the app)._** After installing the mod version, I logged in with a different number, but there's a problem with the app now. It can't detect its exact location. I don't know why this is happening. So, I fixed it by spoofing the location permanently. (location - Noida Sector 34 to Pari Chowk)

## How's MOD version is working now  ☠️
* Fake Virtual EMI and Device info📱
* Fixed the location 📍

Now the app is ready to use that coupon code that is showing invalid earlier. I applied and Explosion(kidding). Code was applied, and I got a Freeride again on the same device with a different number. (Earlier, it can also be done by different login numbers in a different phone every time)
![image5](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/0veklwl6qbijpg5dir7f.png)

I haven't a Screenshot of the mod Version installed on my phones for now, but my friends saw it. I installed 15 mod clones and tried Network Marketing Concept to get Free points in my wallet to purchase Ride Pass.

According to the app, my friends and I will get 100 points, and when he takes any ride, I'll get 25 points on his every ride and plus 500 extra points for five every successful referral. This is an excellent time to earn points and get me a Free pass for the Daily ride. 

![image2](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/24kczhzo9qvhmu049rv5.png)
 
So, I Arranged all 15 Mod apk are as follow:🔮
![image3](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/yeas6cwbwal4j5r9zm1b.jpg)
 
I hope you get an idea, how the flow of points. I applied Free code in all 15 apps. Initially, I used relative's number and consumed ride and their 25 referrals I received in my upper class(friend's number), then used all free rides and got additional points in upper class(Crush's number) and cycles goes on Free Rides.

![image5](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/jcceh3pj813e984g4mf7.jpg)
![image6](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/50k9n7za4r42c2sozkw3.jpg)
 

**_Finally, I got considerable points in my main account and am Ready to buy a 30-day free pass. I did Onboarding of 5 friends from my phone every time._** 

Today, We can use only 20% of the points to buy a pass. Earlier it was 100%. Story changed now.
![image8](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/k7fhouxcccoiujc0fbn7.jpg)
 
I hope you'll get to learn something from this.
**There's always a way, you have to find it.**  _Thank you, share your feedback K Bye :)_