qoft / hcaptcha-exploit

Hcapcha exploit found by dort and qoft.

WARNING

This exploit barely works anymore. dont use for anything xd

Usage

• Update hcaptcha.com to staging.hmt.ai inside your code.
• Also urlencode the sitekey in the request paramters.
• Send a request to getcaptcha and it'l return images with the type inside the url.

Speeds can be improved by changing the language of the actual solver. (Go to the Golang branch)

hcaptcha-exploit's Issues

Bypass patched.

the bypass has patched by them changing the imgs urls so now you dont have the animal on the url

hi

how did you find it

hello this is awesome can you share with us the road map you followed to get these exploit, please

Dogshit

What is this shit. This endpoint is not even knew and has been being used for atleast 8months now, the code barely works and you do not even need browser emulation in order to do this just need to pass proper tls config.

When you do get it working the hit rate is like 1/100 for actually being able to complete the captcha.

Ty

Ty