Skip to content

Latest commit

 

History

History
56 lines (42 loc) · 2.63 KB

hcaptcha.md

File metadata and controls

56 lines (42 loc) · 2.63 KB
Raw

hCaptcha

< - Back To Home

What is HCaptcha and how does it work?

hCaptcha is a primarally image-based bot prevention. It comes in two models, Publisher and Enterprise. hCaptcha Publisher being the free-to-use model. hCaptcha Enterprise employs machine-learning based threat detection, allowing select fingerprints and analyitics bypass the captcha all togther through gathered telemetry on the user. When using 2Captcha, both of these are treated virtually the same, 2Captha's solutions solve the captcha regardless, ignoring the optional fingerprint method.



How to find an hCaptcha sitekey

A major site that uses hCaptcha is Discord, so for this example that's what we'll use. The two required parameters for using the 2captcha service for hCaptcha is a SiteKey & the domain the hCaptcha widget/iframe shows up on. Due to how hCaptcha works, the iFrame only is accessable if hCaptcha Enterprise determines you to be of moderate risk, so you may have to try a few times to get it.

Enter some random data, and press continue.


With a little bit of luck, you should see the hCaptcha widget.


From there, you'll be able to open up dev-tools. (With Chromium, Ctrl + Shift + I), and be able to find a line similar to the one highlighted in this image.

The URL there contains the sitekey within the Query Parameter portions of the URL. https://newassets.hcaptcha.com/captcha/v1/f6912ef/static/hcaptcha-checkbox.html#id=0iqupfjeet7&host=discord.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=4c672d35-0701-42b2-88c3-78380b0db560&theme=dark

Here we can see it says sitekey=4c672d35-0701-42b2-88c3-78380b0db560, and thats the site key! The host is also specified, host=discord.com. Using both of these parameters, we're able to construct some code to automatically complete this captcha.

const Captcha = require("2captcha");
const solver = new Captcha.Solver("<Your 2Captcha API Key>");

// Sitekey & Domain
solver.hCaptcha("4c672d35-0701-42b2-88c3-78380b0db560", "discord.com")
.then((res) = {
    console.log(res);
})

solver.hcaptcha({
    pageurl: "https://discord.com",
    sitekey: "4c672d35-0701-42b2-88c3-78380b0db560"
})
.then((res) => {
    console.log(res);
})
.catch((err) => {
    console.log(err);
})