Penn Station Coupon Hacking

I’ve always enjoyed hacking the Penn Station coupons, because they’re so poorly secured.

I got an email from Penn Station on the weekend and they have a “slot machine” it seems to run and then randomly send you to another page that generates a coupon.

First thing I noticed is that the url: https://penn-station.com/slots23/ is simply used to expire the current offer, you can change the 23 to another number and find last weeks offer which has closed, incremental numbers don’t currently work, but should in the future as new offers come around. They don’t seem to drop a cookie to stop you from playing repeatedly, so they don’t seem to care too much.

None of that seems to matter though because the resulting page: https://penn-station.com/slotsreward3.php has an easy to swap number as well, you can access all 3 prizes that way.

It used to be that you had to present a physical print-out of this coupon, so I’d have to visit that page and print a fresh one every so often. But seeing as the online order code is SLOTSUB, I suspect the other two are SLOTFRY, SLOTDRINK, and they are.

If you want to save a few bucks, you can do two small subs for BOGO. Here is another hack, get two identical small subs, you may get a little less meat in the middle, but it’s nearly the same as a Large. I think the main difference is a large is cut after it’s toasted and a small is before it’s toasted, so you don’t get that spilling meat out of the middle. The amount you might miss isn’t worth paying an extra $6 for though.

Leave a comment

Design a site like this with WordPress.com
Get started