| TryHackMe - Capture Walkthrough | Bypass Captcha, Brute Force, Flag |

Here you have a video with the walkthrough of Capture challenge from TryHackMe!
Stay here to discover the flag but also to see how to get it! 💣
✔️ Bypass Captcha
✔️ Brute Force
✔️ Flag
▶️ Facebook : / rootshellace
▶️ Instagram : / rootshellace
▶️ Twitter : / rootshellace
▶️ Medium : / rootshellace
Thanks for watching! 🙏
If you enjoyed it, like, share and subscribe!
00:00 - Intro
00:18 - Short video topic description
00:43 - Get CAPTCHA required parameters
03:14 - Create bypass CAPTCHA script for USER
12:41 - Get USER with brute force script
13:01 - Create bypass CAPTCHA script for PASSWORD
15:11 - Get PASSWORD with brute force script
15:22 - Login and get the flag
15:58 - Conclusion
16:33 - Outro

[@cuqier5889]

How would we approach classical image based CAPTCHA (6-letter)?

[@user-mx3ch6nr9g]

موقع مستهدف يوجد فيه CAPTCHA رياضية ادا عمل عليه تخمين او brute force مادا يحدت لي سكربت python

[@Nick-vd7cg]

I just finished my python crash course so it isnt THAT hard to understand most code shown, just not familiar with the module 'RE' yet. The only question i really have, how did you come up with the pattern variable? I dont quite understand the logic behind the alphanumeric string that solves the captcha.

[@Nick-vd7cg]

aaaaaaah its the order of wich the numbers are sorted, \s for whitespace in between the numerical values etc.

[@renad1000]

How can I delete the captcha? If its works with it, i mean i have another ctf but i guess delete the parameter worka too, but i dont know how and i search every where still didnt figure it out if you could help me with it, i have to brute force the password and i have the list but the captcha kills me

[@rootshellace]

I don't think you can actually delete the captcha from a website. If you want to make a similar request with the one made in this video, you can leave the parameter value empty, or even remove it, but I highly doubt it will work. You should see what you can get and use from the request. For instance, even though it might sound dumb, let's say you have a picture captcha with some letters and numbers, where you must type those, maybe A1B2C is the answer. You could check the name of that photo in the page source, it wouldn't be excluded to find it under A1B2C.jpg. In this case, you can parse the content of the response in order to extract that string before .jpg and pass it as value for captcha parameter. It depends a lot on your situation and captcha type.