---
id: 8141
title: "CAPTCHAs Done Right?"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/web-application-pentesting/captchas-done-right/"
published_at: "2018-03-09T00:00:00Z"
tags: ["burp-suite", "web-security", "authentication", "brute-force", "captcha"]
phying_url: "https://phying.com/item/8141"
lang: en
---

# CAPTCHAs Done Right?

## Summary

Shows how a CAPTCHA that can be solved once and replayed fails to stop brute force - a password was cracked on the 86th try - and lists checks like one-time use and session binding.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2018-03-09T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/web-application-pentesting/captchas-done-right/
- **Phying News:** https://phying.com/item/8141