uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

uncaptcha

uncaptcha Googleの音声reCaptchaシステムを85%の精度で破る。 免責事項 unCaptchaは概念実証 を目的としています。私たちの論文の時点では、reCaptchaの音声チャレンジを85%の成功率で解決できることが確認されました。しかし、その後、reCaptchaにはunCaptchaの成功率を制限する追加の保護機能が含まれているようです。 このコードをreCaptchaに対する効果的な攻撃として維持するつもりはありません。...

GoogleRecaptchaBypass

Google Recaptcha Solver Amamos los bots ❤️, pero a Google no. Así que aquí está la solución para eludir Google reCAPTCHA. ¡Resuelve Google reCAPTCHA en menos de 5 segundos! 🚀 Este es un script de Python para resolver Google reCAPTCHA usando la librería DrissionPage. La implementación con Selenium...

keycloak-services: keycloak-services: Authenticator config endpoint exposes raw reCAPTCHA secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

recaptcha

描述 此仓库包含对 Google 反机器人系统 reCAPTCHA 的技术分析，重点关注： 载荷结构与值 指纹识别技术 混淆技术 反调试/篡改技术 虚拟机 联系方式 Discord: @grecaptcha Telegram: @lyxlobyx 混淆技术 reCAPTCHA 是拥有最复杂混淆技术的反机器人系统之一，它采用一系列变换使代码难以阅读且更难进行逆向工程。大多数混淆可以通过抽象语法树 AST 轻松处理，但有些是在运行时处理的，这使得 AST 在这种情况下毫无用处。多态性也被应用于代码，以在脚本的每个版本中改变其结构。例如，代码不会直接执行操作，而是使用形状变化的对象或函数。...

puppeteer-extra

puppeteer-extra 这是 puppeteer-extra 的 monorepo，一个用于 puppeteer 的模块化插件框架。:- 🌟 主要文档请前往puppeteer-extra 包查看。 我们最近还引入了对 Playwright 的支持，如果你感兴趣，可以前往 playwright-extra 查看。...

recaptcha-phish

reCAPTCHA Phish John Hammond | 2024年9月13日 这是一个小型测试工具，用于重现 2024 年 8 月/9 月左右在野外出现的社交工程和网络钓鱼诱饵。 🪝 野外诱饵 最初以 “验证您是人类” 的外衣出现，攻击向量是 复制粘贴 。 它直接指示用户使用热键 Win+R 打开 Windows 运行对话框，并让他们用 Ctrl+V 粘贴浏览器已预先复制到剪贴板中的恶意命令。 尽管这…… 愚蠢 ……但确实可能有效。😅 在 Twitter 上的一些讨论之后，这些显然被称为 "ClickFix" 或 Emmenhtal，用于 Unit42、Orange...

CVE-2026-85602

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

CVE-2026-85602 Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

EUVD-2026-71025

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

CVE-2026-85602 Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

CVE-2026-85602

CVE-2026-85602 affects the Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 . The plugin selects which reCAPTCHA validation branch to execute based solely on the field key present in the submitted payload. On a site configured for reCAPTCHA v3 , an unauthenticated attacke...

BIT-KEYCLOAK-2026-16104 Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

GoogleRecaptchaBypass — Updated!

Google Recaptcha Solver We love bots ❤️, but Google doesn't. So, here is the solution to bypass Google reCAPTCHA. Solve Google reCAPTCHA less than 5 seconds! 🚀 This is a Python script to solve Google reCAPTCHA using the DrissionPage library. Selenium implementation will be added soon. Recent...

Pterodactyl's shared global rate-limit key on login and 2FA checkpoint enables unauthenticated panel-wide authentication lockout (DoS)

Summary The authentication rate limiter used for the login and two-factor checkpoint endpoints applies a single global bucket shared by every client, instead of keying per IP or per account. An unauthenticated attacker sending 10 requests per minute from one IP exhausts the shared bucket and caus...

CVE-2026-16104 Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

CVE-2026-16104 Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

CVE-2026-16104

CVE-2026-16104 affects the authentication configuration endpoint in the Keycloak services used by Red Hat Build of Keycloak. The underlying issue is that the system does not mask sensitive configuration values (e.g., reCAPTCHA secrets) when requested by administrators with view-only permissions, ...

CVE-2026-16104

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

PT-2026-60800

Name of the Vulnerable Software and Affected Versions Red Hat Build of Keycloak affected versions not specified Description A flaw exists in the authentication configuration endpoint of the keycloak-services component, the core engine for Red Hat Build of Keycloak identity and access management...