recaptcha

Description This repository contains a technical analysis of Google's antibot reCAPTCHA focusing on: Payload Structure and Values Fingerprinting Techniques Obfuscation Techniques Anti-debugging/Tampering Techniques Virtual Machines Contact Discord: @grecaptcha Telegram: @lyxlobyx Obfuscation...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

uncaptcha

uncaptcha 以 85% 的准确率击败 Google 的音频 reCaptcha 系统。 免责声明 unCaptcha 旨在成为一个概念验证 。截至我们的论文发表时，我们发现它成功解决了 reCaptcha 音频挑战的 85%。自那以后，reCaptcha 似乎加入了一些额外的保护措施，限制了 unCaptcha 的成功率。 我们不会维护此代码以使其成为对 reCaptcha 的有效攻击。 例如，Google 也改进了其浏览器自动化检测。这意味着在当前状态下，Selenium 无法用于从 Google 获取验证码。这可能导致 Google...

recaptcha-phish

reCAPTCHA Phish John Hammond | 13 de septiembre de 2024 Este es un pequeño arnés para recrear el señuelo de ingeniería social y phishing visto recientemente en la naturaleza alrededor de agosto/septiembre de 2024. 🪝 El señuelo en la naturaleza Originalmente visto con la apariencia "Verifica que...

GoogleRecaptchaBypass

Google Recaptcha Solver Amamos los bots ❤️, pero a Google no. Así que aquí está la solución para eludir Google reCAPTCHA. ¡Resuelve Google reCAPTCHA en menos de 5 segundos! 🚀 Este es un script de Python para resolver Google reCAPTCHA usando la librería DrissionPage. La implementación con Selenium...

CVE-2026-90950

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the request, allowing unauthenticated users to create accounts without solving the reCAPTCHA the site has enabled...

CVE-2026-90950

The Paid Membership Subscriptions WordPress plugin, in versions prior to 3.1.0 , is vulnerable to a security flaw in its registration handler . The root cause is a failure to verify the reCAPTCHA when a form field is missing from the request. This allows unauthenticated users to bypass the reCAPT...

EUVD-2026-85195

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the request, allowing unauthenticated users to create accounts without solving the reCAPTCHA the site has enabled...

puppeteer-extra

puppeteer-extra Este es el monorepo de puppeteer-extra, un framework de plugins modular para puppeteer. :- 🌟 Para la documentación principal, dirígete al paquetepuppeteer-extra. También hemos introducido recientemente soporte para Playwright; si te interesa, dirígete a playwright-extra...

CVE-2026-91010

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin (versions 2.0.5–5.1.0 ) contains a missing authorization flaw in its message deletion AJAX action. The plugin checks only that a nonce parameter is present without validating it and does not verify the reques...

CVE-2026-91010: Missing Authorization

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

keycloak-services: keycloak-services: Authenticator config endpoint exposes raw reCAPTCHA secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

CVE-2026-85602

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

EUVD-2026-71025

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

CVE-2026-85602 Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

CVE-2026-85602

CVE-2026-85602 affects the Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 . The plugin selects which reCAPTCHA validation branch to execute based solely on the field key present in the submitted payload. On a site configured for reCAPTCHA v3 , an unauthenticated attacke...

CVE-2026-85602 Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

PT-2026-85502

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

CVE-2026-85602: Reliance on Untrusted Inputs in a Security Decision

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

BIT-KEYCLOAK-2026-16104 Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...