recaptcha

Description This repository contains a technical analysis of Google's antibot reCAPTCHA focusing on: Payload Structure and Values Fingerprinting Techniques Obfuscation Techniques Anti-debugging/Tampering Techniques Virtual Machines Contact Discord: @grecaptcha Telegram: @lyxlobyx Obfuscation...

recaptcha-phish

reCAPTCHA Phish John Hammond | 13 de septiembre de 2024 Este es un pequeño arnés para recrear el señuelo de ingeniería social y phishing visto recientemente en la naturaleza alrededor de agosto/septiembre de 2024. 🪝 El señuelo en la naturaleza Originalmente visto con la apariencia "Verifica que...

GoogleRecaptchaBypass

Google Recaptcha Solver Amamos los bots ❤️, pero a Google no. Así que aquí está la solución para eludir Google reCAPTCHA. ¡Resuelve Google reCAPTCHA en menos de 5 segundos! 🚀 Este es un script de Python para resolver Google reCAPTCHA usando la librería DrissionPage. La implementación con Selenium...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

uncaptcha

uncaptcha 以 85% 的准确率击败 Google 的音频 reCaptcha 系统。 免责声明 unCaptcha 旨在成为一个概念验证 。截至我们的论文发表时，我们发现它成功解决了 reCaptcha 音频挑战的 85%。自那以后，reCaptcha 似乎加入了一些额外的保护措施，限制了 unCaptcha 的成功率。 我们不会维护此代码以使其成为对 reCaptcha 的有效攻击。 例如，Google 也改进了其浏览器自动化检测。这意味着在当前状态下，Selenium 无法用于从 Google 获取验证码。这可能导致 Google...

keycloak-services: keycloak-services: Authenticator config endpoint exposes raw reCAPTCHA secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

puppeteer-extra

puppeteer-extra Este es el monorepo de puppeteer-extra, un framework de plugins modular para puppeteer. :- 🌟 Para la documentación principal, dirígete al paquetepuppeteer-extra. También hemos introducido recientemente soporte para Playwright; si te interesa, dirígete a playwright-extra...

CVE-2026-85602

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

CVE-2026-85602 Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

EUVD-2026-71025

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

CVE-2026-85602 Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

CVE-2026-85602

CVE-2026-85602 affects the Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 . The plugin selects which reCAPTCHA validation branch to execute based solely on the field key present in the submitted payload. On a site configured for reCAPTCHA v3 , an unauthenticated attacke...

BIT-KEYCLOAK-2026-16104 Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

GoogleRecaptchaBypass — Updated!

Google Recaptcha Solver We love bots ❤️, but Google doesn't. So, here is the solution to bypass Google reCAPTCHA. Solve Google reCAPTCHA less than 5 seconds! 🚀 This is a Python script to solve Google reCAPTCHA using the DrissionPage library. Selenium implementation will be added soon. Recent...

Pterodactyl's shared global rate-limit key on login and 2FA checkpoint enables unauthenticated panel-wide authentication lockout (DoS)

Summary The authentication rate limiter used for the login and two-factor checkpoint endpoints applies a single global bucket shared by every client, instead of keying per IP or per account. An unauthenticated attacker sending 10 requests per minute from one IP exhausts the shared bucket and caus...

CVE-2026-16104 Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

CVE-2026-16104 Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

CVE-2026-16104

CVE-2026-16104 affects the authentication configuration endpoint in the Keycloak services used by Red Hat Build of Keycloak. The underlying issue is that the system does not mask sensitive configuration values (e.g., reCAPTCHA secrets) when requested by administrators with view-only permissions, ...

CVE-2026-16104

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

PT-2026-60800

Name of the Vulnerable Software and Affected Versions Red Hat Build of Keycloak affected versions not specified Description A flaw exists in the authentication configuration endpoint of the keycloak-services component, the core engine for Red Hat Build of Keycloak identity and access management...