https://www.leobenchoi.com/tags/%E9%AA%8C%E8%AF%81%E7%A0%81%E7%BB%95%E8%BF%87/御衡的笔记Hugo 0.166.0 & FixIt v0.4.5zh-CNTue, 07 Apr 2026 17:55:00 +0000https://www.leobenchoi.com/posts/2026/juice-shop-captcha-bypass/Tue, 07 Apr 2026 17:55:00 +0000https://www.leobenchoi.com/posts/2026/juice-shop-captcha-bypass/安全<h1 class="heading-element" id="juice-shop-captcha-bypass绕过验证码批量提交反馈"><span>【juice-shop】★★★ CAPTCHA Bypass：绕过验证码批量提交反馈</span> <a href="#juice-shop-captcha-bypass%e7%bb%95%e8%bf%87%e9%aa%8c%e8%af%81%e7%a0%81%e6%89%b9%e9%87%8f%e6%8f%90%e4%ba%a4%e5%8f%8d%e9%a6%88" class="heading-mark"> <svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg> </a> </h1><h2 class="heading-element" id="0x01-任务简报"><span>0x01 任务简报</span> <a href="#0x01-%e4%bb%bb%e5%8a%a1%e7%ae%80%e6%8a%a5" class="heading-mark"> <svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg> </a> </h2><blockquote style="border-left: 5px solid #6f42c1; background-color: #f5f3ff; padding: 20px; margin: 1.5rem 0; color: #5521b5; line-height: 1.8; border-radius: 0 5px 5px 0;"> <div style="font-weight: bold; font-size: 1.1rem; margin-bottom: 10px; display: flex; align-items: center;"> <span style="margin-right: 8px;">💡</span> 提示 (Hints) </div> 1. 绕过验证码后，编写脚本自动提交，或打开多个标签页快速提交。<br> 2. 可以准备 10 个浏览器标签页，逐个破解验证码并填写表单，在 20 秒内快速切换提交。<br> 3. 若要求改为 60 秒内提交 100 条以上，标签页切换策略将难以应对。<br> 4. 深入研究验证码机制的工作原理，尝试寻找绕过方法或自动化动态破解方案。<br> 5. 将操作封装成脚本，重复执行 10 次。 </blockquote> <hr> <h2 class="heading-element" id="0x02-实战复现漏洞"><span>0x02 实战：复现漏洞</span> <a href="#0x02-%e5%ae%9e%e6%88%98%e5%a4%8d%e7%8e%b0%e6%bc%8f%e6%b4%9e" class="heading-mark"> <svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg> </a> </h2><h3 class="heading-element" id="-第一步抓包分析验证码机制"><span>🔍 第一步：抓包分析验证码机制</span> <a href="#-%e7%ac%ac%e4%b8%80%e6%ad%a5%e6%8a%93%e5%8c%85%e5%88%86%e6%9e%90%e9%aa%8c%e8%af%81%e7%a0%81%e6%9c%ba%e5%88%b6" class="heading-mark"> <svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg> </a> </h3><p>打开 Burp Suite，访问 <code>http://127.0.0.1:3000/#/contact</code>，分析请求包。</p>