Black Hat Forum
Go Back   Black Hat Forum > BlackHatWorld Forum > BlackHat Lounge

BlackHat Lounge What’s been on your mind lately? Maybe you've come across a website that made you laugh. Almost anything goes here!

Search
 
Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 07-22-2008, 01:07 PM
nirvana's Avatar
Newbie
 
Join Date: Apr 2008
Posts: 8
Thanks: 55
Thanked 3 Times in 3 Posts
Activity: 28%
Longevity: 16%
Today: 1/5
Default WebVisum + FireFox = Perfect OCR

WebVisum is a unique browser add on which greatly enhances web accessibility and empowers the blind and visually impaired community by putting the control in your hands! Its aim is to allow you to better enjoy surfing the net and be significantly less dependent upon outside help. Now available in English, German, Russian, Italian and Slovak! We're looking for volunteers to help us translate to more languages, contact us if you can help!

Just a few exciting features that we already offer:

* Community driven tagging and page enhancements.
* Automated and instant CAPTCHA image solving, sign up to web sites and make forum posts and blog comments without asking for help!
* Built in helper functions for easier page navigation and less confusion.
* Numerous under the hood page tweaks designed to help screen reader users.
* Visually Impaired users benefit from features such as high contrast page viewing, link and focus highlighting, and more.


Works with Google, Myspace, Youtube, tested. 100% accuracy

hxxp://www.webvisum.com/

Last edited by nirvana; 07-22-2008 at 01:13 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
The Following User Says Thank You to nirvana For This Useful Post:
foxler (07-25-2008)
  #2 (permalink)  
Old 07-22-2008, 01:43 PM
nirvana's Avatar
Newbie
 
Join Date: Apr 2008
Posts: 8
Thanks: 55
Thanked 3 Times in 3 Posts
Activity: 28%
Longevity: 16%
Today: 1/5
Default Re: WebVisum + FireFox = Perfect OCR

.... it worked with every captcha i've tried, can be used in association with php account creation scripts.... such as

hxxp://www.esrun.co.uk/blog/gmail-account-creator-gac/

to create gmail accounts on the fly
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 07-23-2008, 04:44 AM
Jr. VIP
 
Join Date: Dec 2007
Posts: 335
Thanks: 0
Thanked 26 Times in 20 Posts
Activity: 19%
Longevity: 26%
Today: 1/5
Default Re: WebVisum + FireFox = Perfect OCR

Will be fun to see if you can rip out the captcha solving mod :-) will maybe try tonight
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 07-23-2008, 05:10 AM
blanko's Avatar
Jr. VIP
 
Join Date: Mar 2008
Posts: 599
Thanks: 5
Thanked 11 Times in 11 Posts
Activity: 37%
Longevity: 19%
Today: 1/5
Default Re: WebVisum + FireFox = Perfect OCR

Quote:
Originally Posted by JohnDoe View Post
Will be fun to see if you can rip out the captcha solving mod :-) will maybe try tonight
Is this even possible?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 07-23-2008, 11:00 AM
Jr. VIP
 
Join Date: Dec 2007
Posts: 335
Thanks: 0
Thanked 26 Times in 20 Posts
Activity: 19%
Longevity: 26%
Today: 1/5
Default Re: WebVisum + FireFox = Perfect OCR

It cracks google mail and a few other sites that I have tried it with,

I did want to show you it cracking gmail but it only breaks 10 captcha's a day.
Funny thing is there sign up for is not protected, so you could create a large amounts of accounts to rotate.








There FAQ must be out dated as it works pretty well. It uploads the image as a base64 string to a webservice and then when it has cracked it alerts you and puts it in the clipboard.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #6 (permalink)  
Old 07-24-2008, 01:21 PM
ghands's Avatar
Jr. VIP
 
Join Date: Feb 2008
Location: Dewsbury, Yorkshire, UK
Posts: 213
Thanks: 17
Thanked 10 Times in 4 Posts
Activity: 16%
Longevity: 21%
Today: 1/5
Default Re: WebVisum + FireFox = Perfect OCR

Seriously, this can read Google Captcha's - I wouldnt have thought that was possbile for standard OCR. Man, things must have improved recently. This could change the game!
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #7 (permalink)  
Old 07-25-2008, 05:41 AM
Jr. VIP
 
Join Date: Dec 2007
Posts: 335
Thanks: 0
Thanked 26 Times in 20 Posts
Activity: 19%
Longevity: 26%
Today: 1/5
Default Re: WebVisum + FireFox = Perfect OCR



It gunzips the image and then uploads it to the server and is given a unique hash. It then polls the server waiting for the server to finish the OCRing and breaking of the captcha


Quote:
<?xml version="1.0" encoding="UTF-8"?>
<result method="captcha.result" status="ok" message="0">
<hash>d3a9c40ee8cd77d9d34786e8b9b87e13</hash>
<text></text>
<eta>5</eta>
</result>
Eg 5 seconds left to crack the image

And in 5 seconds the result will be returned back

Quote:
<?xml version="1.0" encoding="UTF-8"?>
<result method="captcha.result" status="ok" message="0">
<hash>d3a9c40ee8cd77d9d34786e8b9b87e13</hash>
<text>cogisgro</text>
<eta>0</eta>
</result>
If any one wants my sniffer logs let me know as they are a bit big to post here but are quite interesting :-)
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #8 (permalink)  
Old 07-25-2008, 01:55 PM
foxler's Avatar
Jr. VIP
 
Join Date: Mar 2008
Posts: 254
Thanks: 30
Thanked 69 Times in 13 Posts
Activity: 40%
Longevity: 20%
Today: 0/5
Default Re: WebVisum + FireFox = Perfect OCR

JohnDoe what soft do you use for the sniffing?

Nice find nirvana, Now to see if I code something that associates them automatically.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #9 (permalink)  
Old 07-25-2008, 02:27 PM
Jr. VIP
 
Join Date: Dec 2007
Posts: 335
Thanks: 0
Thanked 26 Times in 20 Posts
Activity: 19%
Longevity: 26%
Today: 1/5
Default Re: WebVisum + FireFox = Perfect OCR

You can use wireshark but for pure http traffic you would be best off with a product called
"IEInspector" you will need to get the standalone version so you can stuff any program rather than the intergrated IE version.

Let me know if you need a key once you get it I will send you log file as it makes it so easy to view what's going on.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Add Your Link



Site protected by Firewall Script


Sitemap: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54