Dear leets this tools looks promising. Just have look at its video and see what can be done against website security check point Captchas.
Captcha Intruder is an automatic pentesting tool to bypass captchas.
Installation
Code runs on many platforms. It requires Python and the following libraries:
- python-pycurl – Python bindings to libcurl
- python-libxml2 – Python bindings for the GNOME XML library
- python-imaging – Python Imaging Library
On Debian-based systems (ex: Ubuntu), run:
sudo apt-get install python-pycurl python-libxml2 python-imaging
Usage
cintruder [OPTIONS]
Options:
| –version | show program’s version number and exit |
| -h, –help | show this help message and exit |
| -v, –verbose | active verbose mode output results |
| –proxy=PROXY | use proxy server (tor: http://localhost:8118) |
| –track=TRACK | download a number of captchas from url (to: ‘inputs/’) |
| –train=TRAIN | apply common OCR techniques to captcha |
| –crack=CRACK | brute force using local dictionary (from: ‘iconset/’) |
| –xml | export result to xml format |
Advanced OCR (training):
| –set-id=SETIDS | set colour’s id manually (use -v for details) |
| –editor | launch an editor to apply image filters |
Modules (training):
| –list | list available modules (from: ‘core/mods/’) |
| –mod=NAME | train using a specific OCR exploiting module |
Handlering (cracking):
| –tool=COMMAND | replace suggested word on commands of another tool. use ‘CINT’ marker like flag (ex: ‘txtCaptcha=CINT’) |
Related Links
- Project Website (http://cintruder.sourceforge.net/
- IRC: irc.freenode.net / channel: #cintruder
Share and Enjoy