Since Google's, Microsoft's, and IBM's speech-to-text systems seem to work the best, those are already included in queryAPI.py. You'll also need to set your credentials for whichever speech-to-text API you choose. On Linux, using the command xdotool getmouselocation -shell to find the coordinates of your mouse may be helpful. These coordinates are located at the top of run.py. Since unCaptcha2 has to go to specific coordinates on the screen, you'll need to update the coordinates based on your setup. Submit audio challenge to Speech To Text.Navigate to audio challenge for ReCaptcha.

Navigate to Google's ReCaptcha Demo site.

There is certainly work to be done here - the coordinates need to be updated for each new user and is not the most robust. Since the changes to ReCaptcha prevent Selenium, a browser automation engine, unCaptcha2 uses a screen clicker to move to certain pixels on the screen and move around the page like a human. The code now only needs to make a single request to a free, publicly available speech to text API to achieve around 90% accuracy over all captchas. Thanks to the changes to the audio challenge, passing ReCaptcha is easier than ever before.

The team has allowed us to release the code, despite its current success. We have been in contact with the ReCaptcha team for over six months and they are fully aware of this attack. However, as of June 2018, these challenges have been solved. These changes were initially successful in protecting against the original unCaptcha attack. After the release of this work, Google released an update to ReCaptcha with the following major changes: ⚠️Ĭreated in April 2017, unCaptcha achieved 85% accuracy defeating Google's ReCaptcha. Only use on sites you control for educational purposes. ⚠️ This code works on the most recent version of ReCaptcha v2.

Protect against google recaptcha bypass