Lucene search
+L

Pastebin CAPTCHA Bypass

🗓️ 28 Nov 2013 00:00:00Reported by Scott ArciszewskiType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 28 Views

Pastebin CAPTCHA bypass technique reported to staff for fixin

Code
`Hello all,  
  
After reading an article in Go Null Yourself about abusing PhpBB's  
Tell-a-Friend feature a while back, I've kept an eye out for ways to spam  
people or bypass a website's flood protection. (Apologies to forum  
moderators everywhere!)  
  
On October 5, I discovered a captcha bypass technique and promptly reported  
it to the Pastebin staff. They responded on October 7 and said they would  
look into it. It's November 27 and they still haven't fixed this (despite  
me giving them the solution).  
  
The technique (which is pretty lame and obvious):  
  
1. Authenticate with a Twitter/Facebook account  
2. Create a new paste  
3. Write something benign that will not trigger their spam filter  
4. Submit  
5. Immediately edit the paste  
6. Replace your benign message with whatever spammy filth you want!  
  
I'm not going to write a script to automate this, but it should be trivial.  
If nothing else, you can spare yourself the trouble of solving a captcha  
next time you decide to dump IRC logs or your rivals' mail spools and  
something happens to contain a hyperlink.  
  
Happy thanksgiving,  
  
Scott Arciszewski  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation