Author Topic: Bypassing custom CAPTCHA  (Read 2099 times)

0 Members and 1 Guest are viewing this topic.

Offline delirious

  • NULL
  • Posts: 4
  • Cookies: -1
    • View Profile
Bypassing custom CAPTCHA
« on: March 16, 2014, 02:02:32 am »
Hi guys,


I'm running some project regards scrapping information about companies in my country. I have around 150 000 records in my database and it contains only a half of datas. Second part has to be scrapped from gov site.
Gov site is secured by custom made captcha: See the link below
https://prod.ceidg.gov.pl/CEIDG/CEIDG.Public.UI/Search.aspx


I wrote some script in Python in which i'm trying to OCR the image. But it does not work properly.
That's nothing illegal but it gonna be annoying to writing 150 000 captchas :(


Do you guys have any ideas ?


Does anyone can help me please ?

« Last Edit: March 16, 2014, 02:03:57 am by delirious »

Offline delirious

  • NULL
  • Posts: 4
  • Cookies: -1
    • View Profile
Re: Bypassing custom CAPTCHA
« Reply #1 on: March 16, 2014, 10:16:20 am »
Yeah sure but i don't want to pay for that. I don't need any third party services. That is why i'm looking other ways

Offline delirious

  • NULL
  • Posts: 4
  • Cookies: -1
    • View Profile
Re: Bypassing custom CAPTCHA
« Reply #2 on: March 16, 2014, 04:41:09 pm »
Can you tell me sth more about it ?


I wrote some script which was scrapping jpg with captcha then every digit was trimmed separately (except those which was sticked together) and compared with source.


But it was not working good enough.
Any help would be great.

Offline M1lak0

  • Peasant
  • *
  • Posts: 129
  • Cookies: 10
    • View Profile
Re: Bypassing custom CAPTCHA
« Reply #3 on: March 18, 2014, 06:35:30 am »
I guess Using Regex would help bypassing CAPTCHA!
"Security is just an illusion"

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Re: Bypassing custom CAPTCHA
« Reply #4 on: March 18, 2014, 09:11:18 am »
I guess Using Regex would help bypassing CAPTCHA!
Regex ain't shit if captcha is an image. However there was this one moment where some dudes could bypass Google's reCaptcha by analyzing audio it provides for those who couldn't see that captcha.
« Last Edit: March 18, 2014, 09:11:36 am by Kulverstukas »

Offline delirious

  • NULL
  • Posts: 4
  • Cookies: -1
    • View Profile
Re: Bypassing custom CAPTCHA
« Reply #5 on: April 16, 2014, 08:30:29 am »
Thank you for all your replies.
Yesterday i found something strange and amazing in one time. It solving my problem but when I was thinking about that  ...i think it's impossible without internal access. Look at this video:


https://www.youtube.com/watch?feature=player_embedded&v=HLxruEi3h0M


This is exacly site i need to break captcha. What is strange ?
I think the author add some addon to web browser which ..."capture" request and response...between client and server.


You probably has more knowledge, experience than me. Can you tell me please is this possible ? and how it can be build ?

One fast question at the end. Fiddler is able to show all advanced "conversation" between server and client ??

Thanks for all your reply.



« Last Edit: April 16, 2014, 08:35:08 am by delirious »

Offline techb

  • Soy Sauce Feeler
  • Global Moderator
  • King
  • *
  • Posts: 2350
  • Cookies: 345
  • Aliens do in fact wear hats.
    • View Profile
    • github
Re: Bypassing custom CAPTCHA
« Reply #6 on: April 17, 2014, 03:56:14 am »
A way to bypass captcha I seen on HaD was from the audio some give. If it gives you an option to "listen" to it, breaking it becomes much much simpler. No more image processing, just some audio filters and speech to text stuff.

Some captcha stuff HaD has posted, I'm sure the audio post is in there somewhere, but a resource non-the-less:

http://hackaday.com/?s=captcha
>>>import this
-----------------------------