1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Decaptcher + Xrumer success rate? Hypothetical maximising.

Discussion in 'Black Hat SEO' started by bluelightning2k, Feb 16, 2010.

  1. bluelightning2k

    bluelightning2k Newbie

    Joined:
    Mar 6, 2009
    Messages:
    16
    Likes Received:
    0
    Hey,

    What success rate of account creation on phpbb is possible using (together) xrumer and decaptcher with (for example) good proxies, randomised email address at a catch-all domain, etc.

    And how would this be maximised? (Sadly, I don't know any service similar to decaptcher but for text captchas, but that's one obvious way.)



    In terms of just creating accounts I guess the problems come from:
    1) blacklists, ie. akismet style systems and known or open proxies/ips.
    2) creating too many accounts -- again akismet style system recognising botlike behaviour from ip/dns/ip-group/email address patterns.
    3) captcha (decaptcher style service should solve this).
    4) text captcha: xrum has a big list but it's presumably tip of the iceberg. (someone really needs to start a decaptcher style service for this.)
    5) MODS. I had a look at the PHPBB3 antispam mod section, and there are a few that would give trouble -- but combined downloads are really low (like 10k total) so this seems actually like a small problem. Specific plug-ins could get round most?
    6) Custom: Custom antispam code is almost bulletproof, but again very small numbers so no big problem.


    I don't know how much 1 and 2 actually matter on say phpbb -- ie. if most people use something like this or if it's just "worst case".

    I guess I can't get my head around why success rate seems so low even with captchabot (although I would assume decaptcher style service would raise this over captchabot -- anyone have any experience actually?).
     
  2. bluelightning2k

    bluelightning2k Newbie

    Joined:
    Mar 6, 2009
    Messages:
    16
    Likes Received:
    0
    Very good response, thanks Murk!

    Also I checked out and read in its entirity your ******.info site -- very good potential.
     
  3. bluelightning2k

    bluelightning2k Newbie

    Joined:
    Mar 6, 2009
    Messages:
    16
    Likes Received:
    0
    Ok, I've just looked into that antispam site you talked about.

    Seems to be a honeypot -- it occurs to me that one could easily identify such traps. (Use one proxy for a blast, semi-randomise the username, then just trace those that appear. Should be easy enough through uploading logs and parsing through PHP. Question is obviously if it's worth it.)