Attendance OTP Telegram Bot

Disclaimer!!: This project is strictly for educational purposes and personal learning.
It does not intend to exploit, interfere with, or harm any real systems.

Reversed engineered the attendance system api to forge otp code submissions via direct api requests for registered group of people

💡 Motivation

• At the time, I was learning Golang and wanted to apply its concurrency concepts by building a practical project
• To learn and practice reverse engineering APIs and understand how network-based authentication systems work
• Learn how to start doing CI / CD flows
• To gain hands-on experience in self-hosting applications using Docker and Coolify on a VPS
• To deepen my understanding of networking, automation, and backend systems

🚀 Lessons Learned

• How to intercept api requests with HTTP Toolkit
• Reading and understanding different handshakes
• Hosting the database and the bot itself on a VPS with Coolify & Docker
• Improving on concurrency concepts such as goroutines and communication within channels
• How to forge graphql requests

🛠️ Technologies Used

• golang – Core programming language used to build the bot
• HTTP Toolkit – To intercept api requests between the client and the server
• Coolify – To host the bot and the database on a VPS
• Docker – To host the bot and the database on a VPS
• SQL – To store and retrieve data from the database