captcha-harvester 2.2.0

Solve captchas yourself without having to pay for services like 2captcha for use in automated projects.

CaptchaHarvester

Solve captchas yourself without having to pay for services like 2captcha for use in automated projects.

v3 Is On The Way!

Since the last commit to this repo I've been working hard on v3. This is a big leap full of slick features that make it a breeze to start harvesting captchas anywhere!

Go checkout first draft of the docs and see for yourself!

If you are interested in beta testing or pricing, contact me via Discord.

Discord

If you need help feel free to swing by my Discord!

Use Cases

This project allows you to solve Google's V2 and V3 ReCaptchas as well as hCaptchas. However, since Google's V3 ReCaptchas are based on a rating system of your browser and browsing habits, it's slightly less reliable.

CloudProxy

This project is also natively supported by a newer project of mine which allows you to bypass Cloudflare's Bot Detection. It's super simlpe to setup, just follow the instructions here.

Setup

PyPi

pip install captcha-harvester

If you'd like to subscribe to the latest updates, you can do so here!

The dev Branch

Sometimes there will be updates I'm working on that won't be pushed to the master branch/PyPi because I haven't had time to test them. Sometimes these patches will fix problems you experience in the stable branch, but if things get buggy don't be surprised.

pip install https://github.com/NoahCardoza/CaptchaHarvester/archive/dev.zip

Usage

> harvester

This will setup an HTTP server at https://127.0.0.1:5000 by default.

If you are running MacOS/Windows and have the Google Chrome, all you have to do is pass the the harvester will launch without a hitch! It will automatically open a new instance of Chrome under a temporary profile with and map the domain to the local server.

NOTE: Without the -b/--browser only the server will start up, without the browser. You won't be able to access the site correctly on your normal browsers because the host won't be correctly mapped to the local server. This could be useful if you want to open the browser with your own command line options or you already have one running from a previous session.

If you would like to come up with an automated solution for your OS, I am open to PR requests.

> harvester -h
usage: harvester.py [-h] [-a DATA_ACTION] -k SITE_KEY -d DOMAIN [-H HOST]
                    [-p PORT] [-b BROWSER] [-B] [-r] [-e LOAD_EXTENSION] [-v]
                    {recaptcha-v2,recaptcha-v3,hcaptcha}

CaptchaHarvester: Solve captchas yourself without having to pay for services
like 2captcha for use in automated projects.

positional arguments:
  {recaptcha-v2,recaptcha-v3,hcaptcha}
                        The type of captcha that that that domain/sitekey pair
                        is for.

optional arguments:
  -h, --help            show this help message and exit
  -a DATA_ACTION, --data-action DATA_ACTION
                        Sets the action in rendered recaptcha-v3 when
                        collecting tokens (required with recaptcha-v3)
  -k SITE_KEY, --site-key SITE_KEY
                        The sitekey used by the captcha.
  -d DOMAIN, --domain DOMAIN
                        The domain of the site which hosts the captcha you
                        want to solve.
  -H HOST, --host HOST  Defaults to 127.0.0.1.
  -p PORT, --port PORT  Defaults to 5000.
  -b BROWSER, --browser BROWSER
                        Allows you to pass the path to any Chromium browser.
  -B, --no-browser      Keeps the harvester from launching a browser br
                        default.
  -r, --restart-browser
                        If this flag is not passed, a new instance of the
                        browser will be opened. this flag is most helpful when
                        solving Googles ReCaptchas because if you restat your
                        main profile you'll most likely be logged into Google
                        and will be given an easier time on the captchas.
  -e LOAD_EXTENSION, --load-extension LOAD_EXTENSION
                        Loads unpacked extensions when starting the browser,
                        to load multiple extensions sepparate the paths with
                        commas (must be used with -b/--browser).
  -v, --verbose         Show more server and browser (when using -b/--browser)
                        logging.

For help contact @MacHacker#7322 (Discord)

Configuring The Browser

When accessing the server to collect the tokens you have to do it the right way and you can't connect to it just like any old server. You configure your browser to think that the server is actually the site we want to collect captcha tokens for

How do we do this the EASY way?

Luckily, the easy way is pretty easy. You literally have to do nothing! However, this only works on Mac/Windows (Linux support coming soon). Additionally, you can pass the path to a Chromium browser binary/.exe or a browser that can be found in your $PATH envrionment variable through the -b/--browser.

When using the -b, a browser instance will be lanuched that's totally disconnected from your main Profile (unless you pass -r, which MIGHT be buggy on Windows).

NOTE: The way the harvester is currently setup, if you use the -b flag to start up the browser, then when you quit either the browser or the server, the other will also terminate.

How do we do this the HARD way?

Mainly through the use on the --host-rules Chromium flag. Here's an example:

--host-rules="MAP example.com 127.0.0.1:5000"

Basically this sets the DNS record for example.com to 127.0.0.1:5000 rather than querying a DNS server for the actual IP of the real site. This helps us trick the captcha provider into thinking that the captcha is actually being loaded on their client's.

There are a few other arguments the harvester uses to make things easier and simpler which can be found in /harvester/browser.py.

If for some reason you don't want a browser launched on the start of the harvester or you want to configure it youself, all you have to do is pass the -b/--no-browser flag.

Solveing V2 Captchas with Buster

You might find it useful to use Buster when solving V2 Captchas. You can clone and build the extension for chrome, and then pass the path of the built extension to harvester with the -e/--load-extension flag.

ReCaptcha: V2 vs. V3

When solving Google's v3 captchas, you should login to a Google Account first. The v3 captcha's work of a raiting system of your browsing habits. They are a little finicky compared to their v2 predecessors. If the tokens stop working, you should start using a different Google Account or wait a little bit between reloading the captcha harvester page.

Additonally, V3 ReCaptcha's require an action when submitting the captcha. Sometimes they don't matter if the target site dosen't double check them and you can get away passing anything to (-a/--data-action). However, it is advised that you grab the correct data-action attribute when looking for the sitekey, they should be near each other.

How do I use the tokens of the captcha's I solve?

API

In most cases you'll probably want to use the API to fetch the tokens.

Python

If you want to access the tokens with a Python script, you are in luck! I've included a handy wrapper for the API which makes things really simple. Just take a look at this example:

from harvester import fetch

# assuming we ran: harvester recaptcha-v2 -d guerrillamail.com -k 6LcIHdESAAAAALVQtprzwjt2Rq722tkxk-RDQ0aN
token = fetch.token('guerrillamail.com')
print('Token:', token)

# assuming we ran: harvester recaptcha-v2 -d guerrillamail.com -k 6LcIHdESAAAAALVQtprzwjt2Rq722tkxk-RDQ0aN -p 8888
token = fetch.token('guerrillamail.com', port=8888)
print('Token:', token)

Any Other Lanuage (via HTTP API)

If your lanuage of choice isn't Python, then you can grab tokens by making calls to the API endpoints that the harvester's server has avalible.

Route	Type	Description
/<domain>/token	String	This is your most useful endpoint. When called it will pop a token from the queue and return it in plain text. If no tokens are available it will return a 418 status code.
/<domain>/tokens	List[String]	This will return a list of all the avalible tokens in the queue. It is recomended that you never use any tokens you see in this list because then /token may return an already used token.

Where <domain> is the domain the harvester was lanuched on. We need this because the harvester supports intercepting multiple domains at a time.

Programtically

You can check out example.py to see how to progamatically start the server and access the tokens by integrating the harvester with your existsing (or new) code.

The main advantage of setting up the harvester programtically is you can set multiple interccepter hooks to solve captchas on multiple domains.

PyArmor/PyInstaller

If you are using this project with PyArmor and or PyInstaller then fear not, it has already been configured to work seamlessly when packages into an .exe file. All you have to do is add the following to your .spec file's Anaysis call.

Anaysis(datas=[
  ("icon.png", r"harvester\server"),
  ("hcaptcha.html", r"harvester\server\templates"),
  ("recaptcha-v2.html", r"harvester\server\templates"),
  ("recaptcha-v3.html", r"harvester\server\templates"),
  ("domains.html", r"harvester\server\templates")
])

Credits

Inspred by Cosmo3904/Recaptcha-Harvester-V2.

For help contact @MacHacker#7322 (Discord)

Has CaptchaHarvester saved you money on your project? Consider buying me a coffee for the countless hours I have spent making your job easier?

Made with ❤️ by @NoahCardoza