Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

.NET 

[Showoff] Facebook Captcha OCR

So I was working on a Facebook cracker, but a dictionary attack was impossible due to the captchas that show up after 10 attempts. I wrote a function to remove the distortion from the images and then trained Tesseract a bit so it can read the processed images better. The accuracy was around %20, but since Facebook still accepts the captcha response if 1 character is incorrect or missing, the total accuracy is around %40.

Example of an input image:
[Image: Cj1vEQu.jpg]
Obviously Tesseract would not be able to read the text from the image before processing.
Example of a processed image:
[Image: 5Dirska.png]
Tesseract successfully read this image as Xp7bad.

The method I used to process the images is pretty simple. I made a 'selection' of all black colored areas and shrunk them, and then resized them. By shrinking enough all lines are removed, but not the letters as they are bigger. And by enlarging the selections again the letters come back to their original size so they can be read easily.

Combining this with Tor networking so I can get 'unlimited' high anonymity, high speed proxies from the Tor network, I can make one fast, 'proxyless' Facebook cracker. If I can't sell this cracker to anyone for a reasonable price I will probably release the code, including the OCR and image processing code in this section for free.

Also made a captcha OCR library for Amazon. No processing was needed since they are already easily readable. Just a bit of training and the accuracy was around %95. Amazon is proxyless as well. 🙂
(Jun 7, 2015 06:48 PM)Ninja Wrote:  So I was working on a Facebook cracker, but a dictionary attack was impossible due to the captchas that show up after 10 attempts. I wrote a function to remove the distortion from the images and then trained Tesseract a bit so it can read the processed images better. The accuracy was around %20, but since Facebook still accepts the captcha response if 1 character is incorrect or missing, the total accuracy is around %40.

Example of an input image:
[Image: Cj1vEQu.jpg]
Obviously Tesseract would not be able to read the text from the image before processing.
Example of a processed image:
[Image: 5Dirska.png]
Tesseract successfully read this image as Xp7bad.

The method I used to process the images is I made a 'selection' of all black colored areas and shrunk them, and then resized them. By shrinking enough all lines are removed, and by enlarging again the letters come back to their original size so they can be read easily.

Combining this with Tor networking so I can get 'unlimited' high anonymity, high speed proxies from the Tor network, I can make one fast, 'proxyless' Facebook cracker.

Also made a captcha OCR library for Amazon. No processing was needed since they are already easily readable. Just a bit of training and the accuracy was around %95. Amazon is proxyless as well. 🙂

Awesome! I can't wait to see the outcome of this project!
[Image: gXLLoG.gif]
(Jun 7, 2015 06:52 PM)Abhax Wrote:  Awesome! I can't wait to see the outcome of this project!

This is the outcome. All I can do is train it so it is more accurate. Or are you talking about the cracker? If all works well I can (hopefully) bruteforce accounts, as the only limitation I have encountered so far is this bloody captcha.
I'm surprised a tarantula could make this, let alone an obese one
GGOP
[Image: jlscvfi.png]
I mean the actual cracker lol.
[Image: gXLLoG.gif]
(Jun 7, 2015 07:10 PM)NETExplorer Wrote:  I'm surprised a tarantula could make this, let alone an obese one
GGOP

its tarantalula or u mean taranlalula 😊
(Jun 7, 2015 08:44 PM)Only3 Wrote:  its tarantalula or u mean taranlalula 😊

Pretty sure its tarantula
[Image: q8th.png]
[Image: jlscvfi.png]
(Jun 8, 2015 08:40 AM)NETExplorer Wrote:  Pretty sure its tarantula
[Image: q8th.png]

Damnit, should have switched my Facebook to private. Now everyone can see my photos on Google. :(
(Jun 8, 2015 09:14 AM)Ninja Wrote:  Damnit, should have switched my Facebook to private. Now everyone can see my photos on Google. :(

At least you have acheived the rank: Family, not forever alone like me. :(
(Jun 8, 2015 10:26 AM)Nicktron Wrote:  At least you have acheived the rank: Family, not forever alone like me. :(

Its okay Nick, one day you will achieve this rank.
(Jun 9, 2015 10:51 AM)Ninja Wrote:  Its okay Nick, one day you will achieve this rank.

:') thanks #hopeforthenope
Impressive work, especially the 95% amazon accuracy 🤝
(Jun 9, 2015 12:22 PM)24/7 Wrote:  Impressive work, especially the 95% amazon accuracy 🤝

They are really easy:
[Image: dIDNaIx.png]
Acutally a pretty nice piece of coding you have there :D I wouldn't know how to do that because im currently still learning VB.NET :D I have a question...Why do you code? I do it for fun but mostly for having that great feeling that everything actually makes sense and you actually DID that :D
Siggi
(Jun 9, 2015 01:27 PM)bluntly Wrote:  Acutally a pretty nice piece of coding you have there :D I wouldn't know how to do that because im currently still learning VB.NET :D I have a question...Why do you code? I do it for fun but mostly for having that great feeling that everything actually makes sense and you actually DID that :D

I do it for the same reasons. But also one more reason: money. Call me greedy but people pay good money for such a project.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Phantom_NiNjaAug 7, 2026 08:22 AM 8 197 Aug 7, 2026 08:22 AM
Last Post: Phantom_NiNja
[.NET] by ClusterzIncMar 11, 2019 09:48 AM 10 1,243 Mar 11, 2019 09:48 AM
Last Post: ClusterzInc
[Java] by TeleforceNov 2, 2018 11:18 AM 0 153 Nov 2, 2018 11:18 AM
Last Post: Teleforce