hCaptcha Bypass Tip :)

[hb0nes]

Hello.

I have also written an epic-games free games snatcher (in Go) and managed to bypass all captcha without any user action.
It is possible to get an hCaptcha accessbility token here:
https://dashboard.hcaptcha.com/welcome_accessibility

It will send an email to the user with a link like so:
https://accounts.hcaptcha.com/verify_email/f0264391-99a8-4ec4-8d24-d80035810909

This link is permanently valid and can be used around 2-3 times per day to set cookies for that session. There will be no more subsequent hCaptcha prompts after setting cookies through that URL.

So instead of setting up mail and going through a broken process (it didn't work for me), a user can just add such a link to their config and it'll set the correct cookies.

Freedom!

[LilTrublMakr]

How do I go about adding this to the config? Is it something the dev needs to implement?

[claabs]

This solution isn't compatible with the current state of the project due to browser security limitations. It'll be implemented in v4.

[LilTrublMakr]

Any ETA when that could be?

[Chr0nicT]

Please note that Epic has since removed all accessibility options for their captcha. I don’t know enough JS to assist here, but if someone could separate browser fingerprinting and captcha solving I could help.

[claabs]

Please note that Epic has since removed all accessibility options for their captcha. I don’t know enough JS to assist here, but if someone could separate browser fingerprinting and captcha solving I could help.

I was able to bypass the captcha using accessibility with Puppeteer. You can see the progress on develop

The overall v4 progress can be tracked here: https://github.com/claabs/epicgames-freegames-node/projects/1

[hb0nes]

In my own yoinker I can still bypass hcaptcha with the hcaptcha accessibility cookie but you need to rate limit how often you use it, like twice per day, or it won't work.

…

On Fri, Sep 3, 2021, 19:09 Charlie Laabs ***@***.***> wrote: Please note that Epic has since removed all accessibility options for their captcha. I don’t know enough JS to assist here, but if someone could separate browser fingerprinting and captcha solving I could help. I was able to bypass the captcha using accessibility with Puppeteer. You can see the progress on develop <https://github.com/claabs/epicgames-freegames-node/commits/develop> The overall v4 progress can be tracked here: https://github.com/claabs/epicgames-freegames-node/projects/1 — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#124 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AJIOJVM5VSDXPUEZFFQRV33UAD6LXANCNFSM47NQ7FYQ> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

[Chr0nicT]

In my own yoinker I can still bypass hcaptcha with the hcaptcha accessibility cookie but you need to rate limit how often you use it, like twice per day, or it won't work.
…

Oh no way. I guess I should check back into mine and see where I went wrong. I was also going hard on the requests though as well, so that may be it. Thank you!

[claabs]

Added in v4: https://github.com/claabs/epicgames-freegames-node/releases/tag/v4.0.0