🥪 SubSavers

In early 2023, Subway had a promotion that would allow you to get free food, redeemable with their own sub points system in their app.

So I built this script to automatically create, manage and verify accounts for me and anyone else who wants to use it.

The steps to use it were as follows:

- Open subsavers.vercel.app

- Walk into a subway & order a side or hot drink

- Show them the qr code on subsavers.vercel.app

- And walk out with your free food :)

Note: It does not work anymore.

Subway changed their website around this time after I notified them of the workaround, so this project no longer works.

But I'm still proud of it :)

The entire tech stack was built around a flask server which would emulate network requests sniffed from the subway app using burp suite & http toolkit in a android emulator.

The accounts were stored in two buckets - verified and unverified. This was to allow me to reuse accounts if they were served on a site but not used by the user, the entire verification, creation and deletion was handled automatically by the server.