/pax-store-captcha-bypass

Proof-of-concept tool for bypassing PAX Store captcha for registration and password recovery

Primary LanguagePythonThe UnlicenseUnlicense

PAX Store captcha bypass with OCR

This project aims to example how basics captchas can be dangerous for your application. Also, this is not an exploit or any kind of code that can affect PAX or any customers of PAX Store platform.

Script running

Note: This script doesn't aim to be precise, just a proof-of-concept that insecure captcha, can be cracked easily. With the correct tunning of OpenCV filters, this precision will be a lot more accurate.

Dependencies

For properly run this script you need:

  • tesseract on version 4.1.1 (default language pack);
  • imgcat on version 2.3.2 (optional, you need to comment on the references for the binary on captcha_collect.sh);

License

This project is licensed under The Unlicense.