Terpy
Registered Member
- Jun 25, 2016
- 65
- 15
Hey guys, recently got into browser automation with python and selenium and have been making various account generators as a way to test myself and learn more. I've been able to knock out almost every form of captcha other than this damn Funcaptcha that is served upon Amazon registration (I've narrowed down most of the browser properties to bypass it, but bad proxies/randomness sometimes cause one to be served). There are two possibilities for the type of funcaptcha game - "choose the swirl" and "choose the animal standing straight". Here's a rough example of the second - https://nojs-game3-prod-us-west-2.a...js/?pkey=2F1CD804-FE45-F12B-9723-240962EBA6F8 - this isn't exactly the same as the one that amazon serves but its close.
Anyways, I'm able to get a token from any of the captcha solving services (using 2captcha atm) and have been stuck with the submission process. I've tried entering the token into the funcaptcha-token and verification-token fields and then submitting their "cvf-arkose-captcha-form" using js but no luck - the page simply refreshes and loads a new challenge. I've analyzed a bunch of network logs and have narrowed down the flow of receiving/sending tokens but there are a few seemingly-encrypted values that I'm unsure of.
Particularly, the final answer (named "guess") is in the form of "{"ct":"1k5rnNPU4JhJZU6Wky8cvCcuDazs6W2fGXEmrpt2vIX66y+nvNNEQcV41LngEC+B","iv":"f4e7bb406a564a55cbd95fe3ff2223b8","s":"6c4dd8ceb7fe5ead"}" (this is also the format for x-requested-id, if that means anything?) - does anyone have an idea how I might go from the received solved-token to these "ct","iv" and "s" values? I don't want you guys to solve it for me or anything, but maybe there's a particular encryption algorithm I should look into? Admittedly, I'm quite new to cryptography so I'm a little lost here.
Sorry for the wall of text, just wanted to give the proper background to my main concern (figuring out the format of the answer value). Feel free to DM me if you don't want your suggestions made public, I understand how it is haha. For the record, I don't plan on selling this, so I'm not competition if you also have an Amazon gen
Thanks yall! I'm also down to simply chat about selenium techniques too if you guys know of anything interesting. Let's trade some sauce!
Anyways, I'm able to get a token from any of the captcha solving services (using 2captcha atm) and have been stuck with the submission process. I've tried entering the token into the funcaptcha-token and verification-token fields and then submitting their "cvf-arkose-captcha-form" using js but no luck - the page simply refreshes and loads a new challenge. I've analyzed a bunch of network logs and have narrowed down the flow of receiving/sending tokens but there are a few seemingly-encrypted values that I'm unsure of.
Particularly, the final answer (named "guess") is in the form of "{"ct":"1k5rnNPU4JhJZU6Wky8cvCcuDazs6W2fGXEmrpt2vIX66y+nvNNEQcV41LngEC+B","iv":"f4e7bb406a564a55cbd95fe3ff2223b8","s":"6c4dd8ceb7fe5ead"}" (this is also the format for x-requested-id, if that means anything?) - does anyone have an idea how I might go from the received solved-token to these "ct","iv" and "s" values? I don't want you guys to solve it for me or anything, but maybe there's a particular encryption algorithm I should look into? Admittedly, I'm quite new to cryptography so I'm a little lost here.
Sorry for the wall of text, just wanted to give the proper background to my main concern (figuring out the format of the answer value). Feel free to DM me if you don't want your suggestions made public, I understand how it is haha. For the record, I don't plan on selling this, so I'm not competition if you also have an Amazon gen
Thanks yall! I'm also down to simply chat about selenium techniques too if you guys know of anything interesting. Let's trade some sauce!
