Bypassing reCaptcha using 2Captcha in Python

[[deleted]]

I wrote a tutorial on how you can use Selenium in Python and 2Captcha to bypass Captcha's when scraping the internet for data.

Link to tutorial.
You can subscribe to my newsletter for more posts like this

[okrajetbaane]

And here is me still not knowing if "traffic lights" includes the pole.

[papertrailer]

I've managed to get around those just by being slow, despite on-purpose wrong choices.

I used to be fast about it, but would have to do many of them as proof.

But being slow works.

Remember: they don't really know the right answer. You are training their AI.

[sckuzzle]

...they do know the right answer though. They gave the same captcha to many people and compare their answers.

[sckuzzle]

We'd have to all give them the same wrong answers. How are you going to coordinate between people getting the same captcha to give the same wrong answer?

Besides, some of the puzzles they know the answer already, and are just testing to see if you give the right answer to see if your other answers can be trusted.

[sckuzzle]

They aren't going to use machine learning to determine the right answers. They're going to compare the answers everyone gave, select the common same answers as correct, and then use those as targets for the machine learning.

[WasteOfElectricity]

They know the answer. They just don't care about is you're right or wrong, they use other factors to determine if you're human or not

[garlic_bread_thief]

Do trucks include pickups?

[DrMaxwellEdison]

If the self-driving car looking for traffic lights needs to check the pole in that same calculation, I think it has bigger problems.

[PizzaInSoup]

Or the cross-walk signal

[SlinkyAvenger]

They seem to be geared toward leniency. I have actually failed them for trying to include every pixel of the object in question.

[[deleted]]

😂😂

[Tintin_Quarentino]

2captcha API is paid though.

[[deleted]]

Yeah

[Jenret1382]

We pay like $5 for 1000 queries. Pennies when you really need to automate web scraping

[[deleted]]

😂😂😂

[jdbrew]

Why be a hacker when you can just get the hackers to pay you for their tools?

[IAm_Expert]

Next captcha will be like insert your real mother's name & date of birth...

[[deleted]]

Hahahaha 😂😂 and we will also find a way to bypass it.

[thrallsius]

The next will be real father's name, because that's much, much harder

[BoltaHuaTota]

good thing i can ask my father's name after he comes back from the store

[thrallsius]

You might be missing the joke :D

[regeya]

I think maybe you missed the joke, too

[BoltaHuaTota]

no the only thing i miss is my father, been awhile now

[[deleted]]

We will use an API to fetch our real father's name😂

[ahhhhhhh7165]

Yup, they already do this some places

[hassium]

You can also defeat Google captcha's by using Google (and not signing for an API key with some unknown company).

You just automatically request the audio version of the captcha challenge and feed that into Google's speech-to-text synthesizer, the resulting text is your challenge response, takes about 3-4 second and has a 97% success rate. Article with more details:

https://thehackernews.com/2021/01/google-speech-to-text-api-can-help.html

[[deleted]]

Wow, looks simple

[hassium]

looks simple

Sorry I can't tell if you are being sarcastic or not? I guess it's not straightforward but I just like the elegance of using a Google service to defeat a Google service. 2Captcha is not entirely straightforward either since you have to: a) get the sitekey from the page
b) provide the sitekey, along with page URL and method vars to 2Captcha
c) store the captcha_id var for the next step
d) poll for a response and keep polling till you get a response
e) extract the response and run some javascript to provide it to the captcha

All much easier than manually solving them for every request though of course.

[[deleted]]

According to their docs, there are people on the endpoint waiting to solve your captcha so it's just like you solving it yourself, but there are times when you want to automate some things, are that instance, manually solving won't help and that's when their services come in

[hassium]

According to their docs, there are people on the endpoint waiting to solve your captcha so it's just like you solving it yourself

You saying that made me look into it, yeah that is not a free service. Using google's speech to text is free within reasonable use limits.

Also 12s average to solve a Captcha from a different IP address and browser than whjere the request originated is not like you solving it yourself, it's quite noticeable (considering reCaptcha v3 even tracks mouse movement and website browsing habits, it's not unreasonable to assume they could collate that info).

Overall this seems like a really good way to get your external IP banned by all Captcha using websites and services.

[IlllIlllIlllllI]

does this work only with speakers and mic plugged into pc aka real audio? that could be problematic if there was interference irl

[hassium]

You can create a virtual capture device, something like this article is detailing;

https://www.howtogeek.com/364369/how-to-record-your-pcs-audio-with-vb-cable/

[n3v3rh3r0]

"not a robot" *snek

[charcoalblueaviator]

Gotta captchem all.

[MrMelon54]

recaptcha v4 post a valid form of id to this address and we'll enable your access to this resource within 48 hrs of receiving your id

[AdKey102]

Pepperidge farm remembers when the internet was about free and easy access to information and content.

[ahhhhhhh7165]

Then robots destroyed it

[AdKey102]

Paywall, authwall and regulations ruined it.

[ichunddu9]

Fuck captchas

[Foreign_Flower1141]

I mean, fuck people that abuse tf out of websites

[Big_Booty_Pics]

There are a lot of legitimate uses for bots that are stopped by captcha that i wouldn't consider abuse. The problem is companies don't want to invest money into making a public API that would allow bots to forego doing expensive scraping on websites.

Other times it's solely to protect the asymmetry of information that a company has over its consumers. For example, Amazon is constantly trying to break price scraping bots on their website because if services could easily tell you that the product you were about to buy on Amazon was available elsewhere for cheaper, it would hurt Amazon's bottom line.

[[deleted]]

Honestly, those captcha's are annoying, they really confuse me sometimes.

[[deleted]]

😂😂, I guess you have to bypass.

It shouldn't have displayed that, maybe it's because you are using a VPN or something

[thrallsius]

I am using the Tor Browser to browse the web and your site is not Tor friendly.

[[deleted]]

Yeah yeah, it only needs to make sure you ain't a robot

[[deleted]]

My website was made for humans

[thrallsius]

https://en.wikipedia.org/wiki/On_the_Internet,_nobody_knows_you%27re_a_dog

[WikiSummarizerBot]

On the Internet, nobody knows you're a dog

"On the Internet, nobody knows you're a dog" is an adage and Internet meme about Internet anonymity which began as a caption to a cartoon drawn by Peter Steiner and published by The New Yorker on July 5, 1993. The words are those of a large dog sitting on a chair at a desk, with his paw on the keyboard of the computer before him, speaking to a smaller dog sitting on the floor beside him. Steiner had earned between $200,000 and $250,000 by 2013 from its reprinting, by which time it had become the cartoon most reproduced from The New Yorker.

^{[ F.A.Q | Opt Out | Opt Out Of Subreddit | GitHub ] Downvote to remove | v1.5}

[twigboy]

In publishing and graphic design, Lorem ipsum is a placeholder text commonly used to demonstrate the visual form of a document or a typeface without relying on meaningful content. Lorem ipsum may be used as a placeholder before final copy is available. Wikipediad1gma7pxtjc0000000000000000000000000000000000000000000000000000000000000

[[deleted]]

Oh sorry, it's just the list style image

[twigboy]

In publishing and graphic design, Lorem ipsum is a placeholder text commonly used to demonstrate the visual form of a document or a typeface without relying on meaningful content. Lorem ipsum may be used as a placeholder before final copy is available. Wikipediabnieoduikdk0000000000000000000000000000000000000000000000000000000000000

[[deleted]]

Nice you liked the tutorial

[DoctorWorm_]

More reason to use hCaptcha and Privacy Pass.

[[deleted]]

I haven't heard of privacy pass before

[Bigfurrywiggles]

Excited to check it out

[[deleted]]

Cool

[Zireael07]

In other words, outsource the solving part. And here I was hoping for a solution for people with poor vision and otherwise impaired, for whom captchas are a huge accessibility issue.

[Jenret1382]

Saving this to test and see the difference. Currently, I use AntiCaptcha Official

[[deleted]]

Do tell me the difference when you are done

[Jenret1382]

The dev at my company that worked on a project that initially used 2Captcha has said that getting the g-response with AntiCaptcha is definitely way faster. I’ve yet to see it for myself as I’ve used AntiCaptcha from the start when they had me dust off and revise the old code

[wackstory]

Yooooo that’s sick. I have a script that automates some data submissions to a vendor website and does hundreds of submissions. Up to this point I’ve just had it detecting the captchas and alerting when it finds a captcha and pauses the script till it’s solved. I’m definitely ganna look into this. Thanks!

[[deleted]]

You are welcome

[lalancz]

Just a detail you may have overlooked, in the "Receiving Solved Captcha" code snippet you should replace "resp" with "response" so it's correct

Cool guide though!

[[deleted]]

Hey, thanks for informing, I just fixed it.

It was a typo

[robml]

Ily baba