HexBrain

RelateIQ · Report #3441

Captcha Bypass With Extension

Validstatus
4upvotes
20 Apr 2014disclosed

How it was found

Hello,

These days Captcha's are one of the most vulnerable methods To Protect The Website From Bots, But there is a Extension Named Rumola Which Automatically Fills up the Captcha While We Fill Other Credentials like Email etc. Here a Vulnerability Arises That Bots May Use This Extension Script in their Interface To Bypass the Captcha Check.

As a Proof of concept i have attached some screenshots.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original