Topic: php human verification / antibot v2 ---> i challenge you to defeat it as bot - page 2. (Read 481 times)
July 28, 2020, 12:31:38 PM
Your errors does not show on ubuntu 20 even with error reporting turned on ... probably a Windows thing ... as you are on Windows ...
July 31, 2020, 06:09:51 AM
There are other bugs in the captcha... Sometimes it's the same person in both images but when you click "I am a human" it still says "You are a bot" I don't know why
This is bug i did not get ... redownload code from github and try again ...
I bypassed the captcha v2, the video: https://streamable.com/qjwxc0
You will notice the bug I talked about in the video
The bot makes mistakes sometimes because the images are low resolution but it keep trying until it gets it right, on average it only makes 0-1 mistake per captcha solved and takes 20-30 seconds per captcha to get solved on average. These numbers can be improved if I implement a feature to make image reverse search to get high resolution images but I'm too lazy to do this.. The current stats are good enough...
So what will be the v3 xD?
That is not bypassing what you did it's called getting lucky or just clicking as human ... if you make just 1 mistake the admin can ban/redirect you etc ( one fail is enough) ... you also have to show your code that you used in video as proof ... you could simply use your mouse and say you bypassed it ...
Look at example how that person bypassed v1 antibot .... and make video like him
Proof you sent is not valid ... try again ... as you did not defeat it.
To defeat vAntibot v2 ...bot must not make any mistake
July 28, 2020, 12:24:33 PM
My database name is vantibot, my table name is vantibot and in index.php,conn.php,database.sql I have everywhere vantibot instead of vAntibot, still the problem is persisting. Also the id is 1 too
EDIT: I fixed the problem, it's a bug in your code.
random_int returns an int between 0 and $totalpeople(included) if randomp1 returns $totalpeople, $famouspeople[$totalpeople] doesn't exist it's a segmentation fault since arrays start at 0. To fix it I added a -1 so it becomes like this:
It fixed the problem
EDIT: I fixed the problem, it's a bug in your code.
Quote
$totalpeople = count($famouspeople);
$randomp1 = random_int(0, $totalpeople);
$randomp2 = random_int(0, $totalpeople);
$randomp3 = random_int(0, $totalpeople);
$randomp4 = random_int(0, $totalpeople);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
$randomp1 = random_int(0, $totalpeople);
$randomp2 = random_int(0, $totalpeople);
$randomp3 = random_int(0, $totalpeople);
$randomp4 = random_int(0, $totalpeople);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
random_int returns an int between 0 and $totalpeople(included) if randomp1 returns $totalpeople, $famouspeople[$totalpeople] doesn't exist it's a segmentation fault since arrays start at 0. To fix it I added a -1 so it becomes like this:
Quote
$totalpeople = count($famouspeople);
$randomp1 = random_int(0, $totalpeople-1);
$randomp2 = random_int(0, $totalpeople-1);
$randomp3 = random_int(0, $totalpeople-1);
$randomp4 = random_int(0, $totalpeople-1);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
$randomp1 = random_int(0, $totalpeople-1);
$randomp2 = random_int(0, $totalpeople-1);
$randomp3 = random_int(0, $totalpeople-1);
$randomp4 = random_int(0, $totalpeople-1);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
It fixed the problem
ah ok if it works for you like that do it like that ... i am on ubuntu ...
July 30, 2020, 05:31:48 PM
There are other bugs in the captcha... Sometimes it's the same person in both images but when you click "I am a human" it still says "You are a bot" I don't know why
This is bug i did not get ... redownload code from github and try again ...
I bypassed the captcha v2, the video: https://streamable.com/qjwxc0
You will notice the bug I talked about in the video
The bot makes mistakes sometimes because the images are low resolution but it keep trying until it gets it right, on average it only makes 0-1 mistake per captcha solved and takes 20-30 seconds per captcha to get solved on average. These numbers can be improved if I implement a feature to make image reverse search to get high resolution images but I'm too lazy to do this.. The current stats are good enough...
So what will be the v3 xD?
July 30, 2020, 04:14:26 PM
There are other bugs in the captcha... Sometimes it's the same person in both images but when you click "I am a human" it still says "You are a bot" I don't know why
This is bug i did not get ... redownload code from github and try again ...
July 28, 2020, 07:08:19 AM
Having this error when trying to implement it locally. Any idea what's the problem?
Edit:Fixed it my self, let's see if I can defeat it!
Quote
Warning: mysqli_connect(): (HY000/1045): Access denied for user 'user'@'localhost' (using password: YES) in C:\xampp\htdocs\conn.php on line 5
ERROR: Could not connect. Access denied for user 'user'@'localhost' (using password: YES)
ERROR: Could not connect. Access denied for user 'user'@'localhost' (using password: YES)
Edit:Fixed it my self, let's see if I can defeat it!
Change database credentials in conn.php when you see that "error" , people need to use their own user ,passw and database
Edit in conn.php $link = mysqli_connect("localhost", "user", "passw", "databasename");
Dunno if it's a problem on my side or it's a bugThat is a notice it's coming from here:
$sql2 = "SELECT vhash FROM vAntibot WHERE id ='1'";
if($result2 = mysqli_query($link, $sql2)){
if(mysqli_num_rows($result2) > 0){
Make sure vAntibot is your table name in your database or change vAntibot to your table name
Also verify if your hash has id 1 in your table ....
Notice tells you that your not getting the right data .
July 30, 2020, 02:29:36 PM
There are other bugs in the captcha... Sometimes it's the same person in both images but when you click "I am a human" it still says "You are a bot" I don't know why
July 29, 2020, 03:10:35 PM
My database name is vantibot, my table name is vantibot and in index.php,conn.php,database.sql I have everywhere vantibot instead of vAntibot, still the problem is persisting. Also the id is 1 too
EDIT: I fixed the problem, it's a bug in your code.
random_int returns an int between 0 and $totalpeople(included) if randomp1 returns $totalpeople, $famouspeople[$totalpeople] doesn't exist it's a segmentation fault since arrays start at 0. To fix it I added a -1 so it becomes like this:
It fixed the problem
EDIT: I fixed the problem, it's a bug in your code.
Quote
$totalpeople = count($famouspeople);
$randomp1 = random_int(0, $totalpeople);
$randomp2 = random_int(0, $totalpeople);
$randomp3 = random_int(0, $totalpeople);
$randomp4 = random_int(0, $totalpeople);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
$randomp1 = random_int(0, $totalpeople);
$randomp2 = random_int(0, $totalpeople);
$randomp3 = random_int(0, $totalpeople);
$randomp4 = random_int(0, $totalpeople);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
random_int returns an int between 0 and $totalpeople(included) if randomp1 returns $totalpeople, $famouspeople[$totalpeople] doesn't exist it's a segmentation fault since arrays start at 0. To fix it I added a -1 so it becomes like this:
Quote
$totalpeople = count($famouspeople);
$randomp1 = random_int(0, $totalpeople-1);
$randomp2 = random_int(0, $totalpeople-1);
$randomp3 = random_int(0, $totalpeople-1);
$randomp4 = random_int(0, $totalpeople-1);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
$randomp1 = random_int(0, $totalpeople-1);
$randomp2 = random_int(0, $totalpeople-1);
$randomp3 = random_int(0, $totalpeople-1);
$randomp4 = random_int(0, $totalpeople-1);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
It fixed the problem
you were right with the error solution is correct,i got it also today ...
will upload to github with new fix
July 28, 2020, 11:30:51 AM
My database name is vantibot, my table name is vantibot and in index.php,conn.php,database.sql I have everywhere vantibot instead of vAntibot, still the problem is persisting. Also the id is 1 too
EDIT: I fixed the problem, it's a bug in your code.
random_int returns an int between 0 and $totalpeople(included) if randomp1 returns $totalpeople, $famouspeople[$totalpeople] doesn't exist it's a segmentation fault since arrays start at 0. To fix it I added a -1 so it becomes like this:
It fixed the problem
EDIT: I fixed the problem, it's a bug in your code.
Quote
$totalpeople = count($famouspeople);
$randomp1 = random_int(0, $totalpeople);
$randomp2 = random_int(0, $totalpeople);
$randomp3 = random_int(0, $totalpeople);
$randomp4 = random_int(0, $totalpeople);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
$randomp1 = random_int(0, $totalpeople);
$randomp2 = random_int(0, $totalpeople);
$randomp3 = random_int(0, $totalpeople);
$randomp4 = random_int(0, $totalpeople);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
random_int returns an int between 0 and $totalpeople(included) if randomp1 returns $totalpeople, $famouspeople[$totalpeople] doesn't exist it's a segmentation fault since arrays start at 0. To fix it I added a -1 so it becomes like this:
Quote
$totalpeople = count($famouspeople);
$randomp1 = random_int(0, $totalpeople-1);
$randomp2 = random_int(0, $totalpeople-1);
$randomp3 = random_int(0, $totalpeople-1);
$randomp4 = random_int(0, $totalpeople-1);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
$randomp1 = random_int(0, $totalpeople-1);
$randomp2 = random_int(0, $totalpeople-1);
$randomp3 = random_int(0, $totalpeople-1);
$randomp4 = random_int(0, $totalpeople-1);
$pp = array($famouspeople[$randomp1],$famouspeople[$randomp2],$famouspeople[$randomp3],$famouspeople[$randomp4]);
It fixed the problem
July 28, 2020, 06:52:35 AM
Having this error when trying to implement it locally. Any idea what's the problem?
Edit:Fixed it my self, let's see if I can defeat it!
Quote
Warning: mysqli_connect(): (HY000/1045): Access denied for user 'user'@'localhost' (using password: YES) in C:\xampp\htdocs\conn.php on line 5
ERROR: Could not connect. Access denied for user 'user'@'localhost' (using password: YES)
ERROR: Could not connect. Access denied for user 'user'@'localhost' (using password: YES)
Edit:Fixed it my self, let's see if I can defeat it!
Change database credentials in conn.php when you see that "error" , people need to use their own user ,passw and database
Edit in conn.php $link = mysqli_connect("localhost", "user", "passw", "databasename");
Dunno if it's a problem on my side or it's a bug July 28, 2020, 05:21:20 AM
Having this error when trying to implement it locally. Any idea what's the problem?
Edit:Fixed it my self, let's see if I can defeat it!
Quote
Warning: mysqli_connect(): (HY000/1045): Access denied for user 'user'@'localhost' (using password: YES) in C:\xampp\htdocs\conn.php on line 5
ERROR: Could not connect. Access denied for user 'user'@'localhost' (using password: YES)
ERROR: Could not connect. Access denied for user 'user'@'localhost' (using password: YES)
Edit:Fixed it my self, let's see if I can defeat it!
Change database credentials in conn.php when you see that "error" , people need to use their own user ,passw and database
Edit in conn.php $link = mysqli_connect("localhost", "user", "passw", "databasename");
July 27, 2020, 10:12:03 PM
Having this error when trying to implement it locally. Any idea what's the problem?
Edit:Fixed it my self, let's see if I can defeat it!
Quote
Warning: mysqli_connect(): (HY000/1045): Access denied for user 'user'@'localhost' (using password: YES) in C:\xampp\htdocs\conn.php on line 5
ERROR: Could not connect. Access denied for user 'user'@'localhost' (using password: YES)
ERROR: Could not connect. Access denied for user 'user'@'localhost' (using password: YES)
Edit:Fixed it my self, let's see if I can defeat it!
July 27, 2020, 09:59:20 PM
The v2 is hard even for humans to recognize if they are the same person if you don't know who's the celibrity lol..
Change to local celebs
July 27, 2020, 09:26:45 PM
The v2 is hard even for humans to recognize if they are the same person if you don't know who's the celibrity lol..
July 27, 2020, 08:12:43 PM
OK I was able to bypass the v1.
Video: https://streamable.com/rr3sli
Language/Libraries used: Python, pyscreenshot, Pillow, Selenium
Steps taken by the bot:
Navigates to the website containing the captcha (localhost in my case),
1- Takes a screenshot (Image 1), clicks on Unlock and takes another screenshot of the browser (Image 2).
2- If Image 1 and Image 2 are different, it clicks on I am Human, if not :Step 3
3- Keeps taking screenshots of the browser after clicking on "Unlock" until it finds a screenshot that is different than Image 2.
4- Clicks on I am human
Was fun to be make but was easier than I thought it would be. If you want the source code, tell me.
Video: https://streamable.com/rr3sli
Language/Libraries used: Python, pyscreenshot, Pillow, Selenium
Steps taken by the bot:
Navigates to the website containing the captcha (localhost in my case),
1- Takes a screenshot (Image 1), clicks on Unlock and takes another screenshot of the browser (Image 2).
2- If Image 1 and Image 2 are different, it clicks on I am Human, if not :Step 3
3- Keeps taking screenshots of the browser after clicking on "Unlock" until it finds a screenshot that is different than Image 2.
4- Clicks on I am human
Was fun to be make but was easier than I thought it would be. If you want the source code, tell me.
No need , vAntiBot v2 uploaded to github ...
Demo: https://www.youtube.com/watch?v=NHfn_Isr0-I
https://github.com/spy100/vAntiBot2 ---> I challenge you all to defeat it as bot
July 27, 2020, 03:30:57 PM
Congratulations to zManuel(https://www.mc-market.org/members/81510/) ! He Bypassed first version of vAntiBot
https://www.youtube.com/watch?v=jzAdUSr0rbI&feature=emb_title
He used a simple solution yet so efficient, kudos to him! He motivated me to explore my idea stated in my other post, I'll report back a video link in case I succeed. So what are you gonna now in terms of modification since he was able to bypass it?https://www.youtube.com/watch?v=jzAdUSr0rbI&feature=emb_title
I am moving to human recognition ... should be ready in a few hours ... let's see...
July 27, 2020, 06:19:15 PM
OK I was able to bypass the v1.
Video: https://streamable.com/rr3sli
Language/Libraries used: Python, pyscreenshot, Pillow, Selenium
Steps taken by the bot:
Navigates to the website containing the captcha (localhost in my case),
1- Takes a screenshot (Image 1), clicks on Unlock and takes another screenshot of the browser (Image 2).
2- If Image 1 and Image 2 are different, it clicks on I am Human, if not :Step 3
3- Keeps taking screenshots of the browser after clicking on "Unlock" until it finds a screenshot that is different than Image 2.
4- Clicks on I am human
Was fun to be make but was easier than I thought it would be. If you want the source code, tell me.
Video: https://streamable.com/rr3sli
Language/Libraries used: Python, pyscreenshot, Pillow, Selenium
Steps taken by the bot:
Navigates to the website containing the captcha (localhost in my case),
1- Takes a screenshot (Image 1), clicks on Unlock and takes another screenshot of the browser (Image 2).
2- If Image 1 and Image 2 are different, it clicks on I am Human, if not :Step 3
3- Keeps taking screenshots of the browser after clicking on "Unlock" until it finds a screenshot that is different than Image 2.
4- Clicks on I am human
Was fun to be make but was easier than I thought it would be. If you want the source code, tell me.
July 27, 2020, 03:08:29 PM
Congratulations to zManuel(https://www.mc-market.org/members/81510/) ! He Bypassed first version of vAntiBot
https://www.youtube.com/watch?v=jzAdUSr0rbI&feature=emb_title
He used a simple solution yet so efficient, kudos to him! He motivated me to explore my idea stated in my other post, I'll report back a video link in case I succeed. So what are you gonna now in terms of modification since he was able to bypass it? https://www.youtube.com/watch?v=jzAdUSr0rbI&feature=emb_title
July 21, 2020, 02:37:17 AM
Most captcha can't be defeated by a bot on it's own. Bot creators usually buy captcha solving services for dirt cheap where the captcha is transmitted to "workers" who solve it instead. Unless you can prevent the captcha getting solved by others, there is not much use of this antibot as it would be as effiicent as other popular captchas in terms of resistance to bots. My 2 sats.
Also, (I'm not sure about this though) but it seems doable to make a python bot with some image recognition library like TensorFlow to wait for detection of changes in pixels (video changed) and then click the button. I'll look more into it it's interesting, it doesn't seem impossible to do.
Also, (I'm not sure about this though) but it seems doable to make a python bot with some image recognition library like TensorFlow to wait for detection of changes in pixels (video changed) and then click the button. I'll look more into it it's interesting, it doesn't seem impossible to do.
if you defeat it as bot , don't forget to show video ... we are experimenting so we got to see proof ... i got an idea to upgrade it to human recognition also ...it's going to be very very hard to do it ...
Case 1
Example : Question : Is person 1 the same as person 2 ?
Picture 1;
Picture 2:
Case 2
Example : Question : Is person 1 the same as person 2 ?
Picture 2:
July 27, 2020, 01:57:03 PM
Congratulations to zManuel(https://www.mc-market.org/members/81510/) ! He Bypassed first version of vAntiBot
https://www.youtube.com/watch?v=jzAdUSr0rbI&feature=emb_title
https://www.youtube.com/watch?v=jzAdUSr0rbI&feature=emb_title
Jump to: