Exclusive for VIT-AP University
This is the final implementation of app. App Icon Will be added
- Future Updates
- Will add textfeilds for user input
This Flutter-based application simplifies the login process for our college WiFi network by bypassing unnecessary manual logouts and re-logins. Designed for Android and iOS, the app leverages a known loophole to provide seamless and automatic connectivity to the college network.
- Automatic Login: Users only need to enter their credentials (Reg No and Password) once. The app ensures automatic login whenever the app is opened.
- No Logout Required: Switching between different blocks on campus no longer requires logging out and logging in repeatedly.
- Bypass Over-Limit Errors: Resolves the issue where users hit login limits by efficiently handling WiFi requests.
- Client-Side Restriction Workaround: Injects JavaScript to fill login fields with superscript-generated credentials bypassing client-side restrictions.
- Algorithm-Based Login Generation: Generates all possible login variations using algorithms developed by Tarun.
- Loophole: The college WiFi login system previously allowed superscripted Reg No inputs, which was later patched with client-side validation. However, this patch does not impact backend fetch requests.
- JavaScript Injection: The app injects JavaScript into the login form to programmatically fill fields with algorithm-generated credentials, bypassing client-side restrictions.
- Exploit: By inspecting the network requests and sending manual fetch calls with superscripted Reg Nos, the app bypasses the frontend restrictions.
- Persistent Login: The app maintains user credentials securely and sends fetch requests to automatically log in without user intervention.
- Frontend: Flutter (Dart)
- Networking:
httppackage to send fetch requests to the WiFi login endpoint. - JavaScript Injection: Injecting custom scripts for bypassing restrictions.
- Storage: Securely saves user credentials using
flutter_secure_storage. - Cross-Platform: Works on both Android and iOS.
- Flutter SDK installed (v3.0+ recommended)
- Dart SDK
- Android Studio / Xcode for device emulation
-
Clone the Repository:
git clone https://github.com/kiran-katakam/infinity.git cd infinity -
Install Dependencies:
flutter pub get
-
Run the App:
- Android:
flutter run -d android
- iOS:
flutter run -d ios
- Android:
-
Build APK/IPA (Optional):
flutter build apk # For Android flutter build ios # For iOS
http: To send network requestsShared Preferences: Secure storage for sensitive dataWebView: To show the user whats going on
- Open the app and enter your Reg No and Password.
- Click Login. The app will save your credentials securely.
- Whenever you open the app, it will automatically log you in without requiring manual interaction.
- Enjoy seamless WiFi connectivity across the campus!
- The loophole exploits a server-side oversight and bypasses client-side validation through JavaScript injection. Please use responsibly and ethically.
This project was a collaborative effort:
- You: Just Wrote the Code and contributed to find the loophole.
- Tarun: Developed the algorithm to generate all possible login variations, and contributed to identifying the loophole.
- github
https://github.com/tarun-ainampudi
- github
This application is intended for educational purposes only and should be used responsibly. Any misuse or violation of university policies is strictly the user's responsibility.