Captcha

[thehillionaire]

While testing Modlishka on a login portal with ReCaptcha v2 enabled, I received the following error when attempting to pass the captcha challenge to the victim's browser:

ERROR for site owner:
Invalid domain for site key

I recently noticed your tweet regarding Modlishka supporting ReCaptcha v2, is there any specific configurations that are needed to properly pass Captcha challenges?

[drk1wi]

It's possible that you will have to patch the relevant JS code.

If you test the default google config from the templates dir this works:
https://www.loopback.modlishka.io/recaptcha/api2/demo

[drk1wi]

Closing this issue since this is related to a specific JS bypass, that has to be created.

[thehillionaire]

Interesting, any idea as to what a JS rule would look like to patch the domain name going to the target site?
Thanks again!

[Phoenix1112]

@thehillionaire i have same problem. could you do something about it?

[thehillionaire]

Not yet, but there's probably a JS substitution that has to be made using the -rules argument that could help.

[Phoenix1112]

@thehillionaire Do we need to add the in rules section in the config.json file? or Do we need to add the in jsRules section in the config.json file ? I share this information with you if I do

[f1h0]

problem with google recaptcha pass urgently need to decide what to do?