noapi-google-search-mcp

noapi-google-search-mcp [email protected] If you want to support noapi-google-mcp or gpt-oss-20B/120B-Vision and other open source models in the pipeline please add to my GPU compute fund: around $3000 are needed. If you find this useful, consider supporting continued development and new...

HATCHA

HATCHA CAPTCHA proves you're human. HATCHA proves you're not. HATCHA H yperfast A gent T est for C omputational H euristic A ssessment is a reverse CAPTCHA that gates access behind challenges trivial for AI agents but painful for humans — large-number multiplication, string reversal, binary...

datadome-vm

DataDome VM Analysis Summary This repository documents the first public version of DataDome's in-browser JavaScript virtual machine VM used in their CAPTCHA/interstitial flow. This analysis covers: Bytecode loading and decoding mechanisms VM memory layout and architecture A proof-of-concept...

maigret

Maigret English · 简体中文 Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors IPcook provides reliable residential proxies for online...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

web-brutator

Web Brutator Fast Modular Web Interfaces Bruteforcer 📥 Install root@kitploit: python3 -m pip install -r requirements.txt ⏩ Usage root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / |...

reverse-captcha-eval

Reverse CAPTCHA: Evaluating LLM Susceptibility to Invisible Unicode Instruction Injection An evaluation framework that tests whether large language models follow invisible Unicode-encoded instructions embedded in otherwise normal-looking text. Where traditional CAPTCHAs exploit tasks humans can...

GoogleRecaptchaBypass

Google Recaptcha Solver 我们喜欢机器人 ❤️，但 Google 不喜欢。 所以，这里有一个绕过 Google reCAPTCHA 的解决方案。 在 5 秒内解决 Google reCAPTCHA！🚀 这是一个使用 DrissionPage 库解决 Google reCAPTCHA 的 Python 脚本。 Selenium 实现即将添加。 最近更新 好消息！Selenium 实现已添加。感谢 @obaskly 的贡献。查看 selenium 分支 了解更多详情。 赞助商 IPcook 需要可靠的代理？IPcook 为你搞定 🔄 自动续费的月度套餐 🚀 99.99%...

awswaf

AWS WAF（亚马逊云服务 Web 应用防火墙）求解器 概述 本项目提供一个基于Golang和Python的AWS WAF挑战求解器。它支持 "token" / "Invisible" 和 "Captcha" 类型，使用gemini。 ⭐️ 表达支持 如果您觉得有用，请给仓库点星！您的支持有助于改进项目。❤️ 用法 Golang root@kitploit: package main import "awswaf/internal/aws" "log" func main // host & gokuProps are obtained from the initial response...

Dorkwright

Dorkwright - Google Dorking Tool Dorkwright is a powerful Python-based Google dorking utility that automates the extraction of file links from Google search results and optionally downloads them. It uses Playwright for browser automation and includes CAPTCHA handling, progress indicators, and a...

CVE-2026-85116

The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin from 1.2.2 before 1.42.3 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execute arbitrary shortcodes registered on the site...

EUVD-2026-76039

The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin from 1.2.2 before 1.42.3 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execute arbitrary shortcodes registered on the site...

CVE-2026-85116 Simple CAPTCHA with Cloudflare Turnstile 1.2.2 - 1.42.1 - Unauthenticated Arbitrary Shortcode Execution via Contact Form 7 Field Repopulation

The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin from 1.2.2 before 1.42.3 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execute arbitrary shortcodes registered on the site...

hcaptcha-challenger

文档 快速入门 简介 hCaptcha Challenger v0.13.0+ 借助大语言模型的 Spatial Chain-of-Thought SCOT 能力构建了一套端到端的 Agentic Workflow，使得 Agent 可遵循指令完成空间视觉通用任务，而无需额外训练或微调 CNN 专家模型。 在 hCaptcha Challenger 中，Agent 通过 Playwright 控制浏览器页面。在您的任务流程中，Agent 通过传入的 Page 对象初始化，并借用该对象接管当前页面的交互。您可以通过 Agent 实现 clickcheckbox（点击验证框）和...

ai-captcha-bypass

AI 驱动的 CAPTCHA 求解器 该项目是一个基于 Python 的命令行工具，利用大型多模态模型（LMM），如 OpenAI 的 GPT-4o 和 Google 的 Gemini，来自动解决各种类型的 CAPTCHA。它借助 Selenium 实现浏览器自动化，与网页交互并实时解决 CAPTCHA。 成功求解的动图会以 GIF 格式保存在 successfulsolves 目录中。 详细博客文章 ：https://aydinnyunus.github.io/2025/12/08/ai-captcha-bypass/ 主要特性 多 AI 提供商 ：支持 OpenAI（例如...

WordPress-Long-Password-Denial-of-Service

WordPress サービス拒否 CVE-2014-9016 免責事項 本スクリプトの内容は、倫理的な方法でのみ使用されることを意図しています。 機器の所有者から書面による許可がない限り、このスクリプトを使用しないでください。 不正な行為を行った場合、逮捕され、法律の最大限の範囲で起訴される可能性があります。 Primus27 は、これらのスクリプトを誤用した場合の責任を一切負いません。これらは概念実証専用です。 本アプリケーションは、適切な責任者から書面による適切な許可を得たテスト環境でのみ使用しなければなりません。 エクスプロイト...

Contact Form 7 Math Captcha <= 2.0.1 - Cross-site Scripting

The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users. id: CVE-2024-6517 info: name: Contact Form 7 Math Captcha =...

phpMyFAQ <= 4.1.1 - SQL Injection

phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector and BuiltinCaptcha::saveCaptcha methods that interpolate unsanitized User-Agent headers into DELETE and INSERT queries. Unauthenticated attackers can exploit the public GET /api/captc...

Monstra CMS 3.0.4 - HTTP Header Injection

Monstra CMS 3.0.4 is susceptible to HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter. An attacker can potentially supply invalid input and cause the server to allow redirects to attacker-controlled domains, perform cache poisoning, and/or allow improper access to...

goop

goop Google Search Scraper Note: It no longer works. Google team told me it's not a legitimate issue when I reported it to them but now they just silently fixed it. Contents Introduction How it works? Usage Installation Example Legal Introduction goop can perform google searches without being...