Cheat: Revealing all questions and answers of a Kahoot quiz.

kahoot.php

<?php

error_reporting(null);

if(!isset($_GET["pin"]))
    die("No PIN?");

$url = "https://kahoot.it/rest/challenges/pin/".$_GET["pin"];
$response = file_get_contents($url);
$jresponse = json_decode($response, TRUE);

$questions = $jresponse["kahoot"]["questions"];

foreach ($questions as $question) {
    echo $question["question"].": ".array_pop(array_filter($question["choices"], "check_true"))["answer"]."\n";
}

function check_true($choice) {
    return $choice["correct"];
}

?>

But it seems like you're getting an invalid challenge pin even when querying kahoot directly?

On that domain, yes. It makes me think that the entire system might have been re-done. Do you have any idea how yourself or someone else could get this working again? I found a site that has documentation of the Kahoot! API, but it got shut down.

When I built this, I was just inspecting the kahoot game and found an endpoint that, when supplied with the pin, was actually revealing all the questions and all the answers all at once. When the game is played, it's just visual on the browser's level. Everything is sent all at once from the get go. Not sure if that's possible still.

Makes sense. If you figure out a way to get it working, let me know. I’ll take a look at the Kahoot code once I run out of other things to do an ill let you know if I find anything :)