POPCAT Click

A simple web-based game where clicking the cat makes it pop, inspired by a meme.

Leaderboards

https://leaderboard.popcat.click/

• Fetching per 5 seconds

Submiting Clicks

https://stats.popcat.click/pop?pop_count=1&token={JWT TOKEN}

• Submiting per 30 seconds
• Has Limit per Requests

Tokens

{ "CountryCode": "ID", "IP": "", "ID": 14, "exp": 1738213143 }

• You will get the tokens after a few seconds after clicking popcat
• Expiration is a day after you got the tokens? or calculated a next 24 hour when sending request?
• Expiration value is a Epoch
• Using HS256 JWT

Pop Count Limits

400 - pop_count must be in the range 1-800

• The limit is 800 clicks per POST request.
• 30 Seconds cooldown
• If the limit exceeds 800, it returns an error. Sending POST requests too quickly results in Error 429.

Demonstration

Tools that will be used:

• Browser that supports Network Inspection
• Postman

Making a Requests

• Search for that requests then you got the JWT yay!

  
  

  

• Create a Postman Requests

  
  

  

Now You can submit a click value without clicking!!

Point of Interest :

The Autoclicker / Javascript hack is not gonna effective to get high scores since the limits is 800 per 30sec, it will just get denied by server

Potential project based on this article

• Popcat Clicks Automation