reCAPTCHA bypass via HTTP Parameter Pollution
In Summary : reCAPTCHA is a Google service that allows web application developers to add a CAPTCHA to their site with minimal effort. reC...
https://updatesinfosec.blogspot.com/2018/05/recaptcha-bypass-via-http-parameter_30.html
In Summary :
reCAPTCHA is a Google service that allows web application developers to add a CAPTCHA to their site with minimal effort. reCAPTCHA is a complex beast with a lot of use cases: sometimes it will trust you based on your existing cookies, sometimes it will require you to solve multiple challenges. The following introduction is for the use case where the vulnerability was found. When the web application wants to challenge the user, Google provides an image set and uses JavaScript code to show them in the browser as follows [...]
kindly refer the following link as follow up :
https://andresriancho.com/recaptcha-bypass-via-http-parameter-pollution/
reCAPTCHA is a Google service that allows web application developers to add a CAPTCHA to their site with minimal effort. reCAPTCHA is a complex beast with a lot of use cases: sometimes it will trust you based on your existing cookies, sometimes it will require you to solve multiple challenges. The following introduction is for the use case where the vulnerability was found. When the web application wants to challenge the user, Google provides an image set and uses JavaScript code to show them in the browser as follows [...]
kindly refer the following link as follow up :
https://andresriancho.com/recaptcha-bypass-via-http-parameter-pollution/
