chrsep/Kingfish

New Binusmaya captcha disables Portal

Closed this issue · 0 comments

Binusmaya just replaced the old captcha that Portal have bypassed with a new captcha that requires us to validate by calculating the number presented inside an image.

It seems to works like this

  1. We make a GET request to https://binusmaya.binus.ac.id/login/captcha.php, and received an image, here the server might associate our cookie with the image and the answer.
  2. We then fill the form and sent it as a POST request to https://binusmaya.binus.ac.id/login/sys_login.php, with the field uid, pass, defaultLoginReal, and ctl00$ContentPlaceHolder1$SubmitButtonBM
  3. The server then compares the defaultLoginReal field in our POST request above and compares it with the answer already associated with our cookie

We currently see two options:

  1. Analyze the image and return the value automatically. It's always a 90x32 image, in the format a (x|+|-) b = ?, which seems to be simple enough to be analyzed with a neural net or OCR engines.
  2. Ask the captcha to every user on every request and log in. which is annoying, and sub-optimal, but seems pretty easy-to-do

I might be able to fix this, but probably not soon enough due to a crippling number of task, so a pull request would be appreciated.