1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Extract Blogger/Google captcha?

Discussion in 'General Programming Chat' started by Deusdies, Sep 17, 2011.

  1. Deusdies

    Deusdies Regular Member

    Joined:
    May 22, 2009
    Messages:
    261
    Likes Received:
    190
    I managed to extract Blogger captcha when creating a new blog on the "New Account" page of blogger. It was simple because captcha in the HTML was a simple <img src element with full URL to it.

    However now at the "Add a Blog" page I'm facing an interesting problem. If I look at the source, I get this:

    Code:
    <img src="/captcha?token=AM2hDkBhmpQ/7vI4IEpTIbk9iZ%2BivuhtGDtJMwV%2BICcrCQE7sXwM%2BZKJVIrrgLg1aDc1TbUFJRWsyQLwpty0rikQJ2y0TjqFqlYXW9ZhmOGkc4%2BZFn5DEnqcl%2BkX7TjJGChUTE9l%2B1/S" width="200" height="70" alt="Visual verification">
    Clicking on "View Image" in Firefox gives me the full address as:
    Code:
    www.blogger.com/captcha?token=AM2hDkBhmpQ/7vI4IEpTIbk9iZ%2BivuhtGDtJMwV%2BICcrCQE7sXwM%2BZKJVIrrgLg1aDc1TbUFJRWsyQLwpty0rikQJ2y0TjqFqlYXW9ZhmOGkc4%2BZFn5DEnqcl%2BkX7TjJGChUTE9l%2B1/S
    I then copy that url, and paste it in Firefox, and voila the captcha opens.

    However, when I try to open it in a different browser, I get 404 Not Found error, and the same error in my program.

    What the hell is going on?!

    EDIT: The page in question is
    Code:
    http://www.blogger.com/create-blog.g
     
  2. inu11byte

    inu11byte Newbie

    Joined:
    Jul 19, 2011
    Messages:
    33
    Likes Received:
    3
    Location:
    nu11byte@root:~#
    The 'token' attribute would have generated it's key and probably store your user-agent in it. Try clearing your cookies and trying that address in Firefox again. That could help to rule out cookies being the problem. Also try fully closing the Firefox browser (of opening another one in 'private browsing' mode) and see what happens with that same address. That will help to determine if sessions are being kept on that. Good luck.
     
    Last edited: Sep 17, 2011
  3. Deusdies

    Deusdies Regular Member

    Joined:
    May 22, 2009
    Messages:
    261
    Likes Received:
    190
    I thought of that too. However I tried accessing the generated token via my program setting the same user agent, still no luck. I will now try setting cookies instead as well. Thanks.

    EDIT: yep, it requires a cookie. Splendid.
     
    Last edited: Sep 17, 2011
  4. xenon2010

    xenon2010 Regular Member

    Joined:
    Apr 27, 2010
    Messages:
    231
    Likes Received:
    48
    Occupation:
    web and desktop apps programmer
    Location:
    prison
    Home Page:
    You always have to consider adding Cookies, User-Agent, Referrer and perhaps some other headers.. sometimes you need to remove certain text from the cookie in order to unblock some certain stuff...