Skip to content
Cracking reCAPTCHA, Turbo Intruder style
portswigger.net | research | #bug-bounty | #web-security | #portswigger | #turbo-intruder | #race-condition | #bypass | #recaptcha
Summary
James Kettle uses Turbo Intruder's last-byte synchronization to trigger a race condition that partially bypasses Google reCAPTCHA, demonstrated against Reddit after Google declined to fix it.
- Published
- Collected