Jump to content
Tuts 4 You

Security Question Bypass


Recommended Posts

This forum has a login system and for "Human"-Verification it asked (me atleast) to scan a QR-Code to get a key that then verifies that im a human. But first of all, if you have a bot it can easily scan the code itself with the help of some github repos ;)

or even easier, you can just open the QR-Image in a new tab and the filename is the key. soooo.. I dont know if you guys already know/care about this but you can also just let it away because anyone who wants to bypass it, can easily do that.

  • Haha 2
Link to comment
Share on other sites

The captcha is just to stop generic forum spam bots, people who run those won't bother adjusting their bot to solve this "simple" challenge to have their bots post a few messages that'll just get deleted.

Link to comment
Share on other sites

  • 1 year later...

Just wondering how the QR code verification can prevent bots to register on the side when it can be bypassed in 2 steps.

1 - Get the image in html DOM and get the generated qr code image link.

2 - Enter the image name in answer input.


Edited by xCore
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...