hunt-captcha-bypass

What problem does it solve? During authorized penetration tests and bug bounty hunts, CAPTCHA mechanisms are often the only gate protecting login, registration, and password reset endpoints from automation. This Skill provides a structured methodology to verify whether CAPTCHA validation is actually enforced server-side or can be bypassed. ## Core Features & Use Cases - Six Bypass Patterns: Covers CAPTCHA field omission, empty/null values, token replay, cross-endpoint token reuse, rate-window gaming, and reactive CAPTCHA thresholds. - Concurrency Guidance: Explains how to satisfy sliding-window rate checks by firing concurrent requests rather than slow sequential ones. - Impact Chaining: Maps CAPTCHA bypass findings to downstream attack chains like brute force, account farming, and token flooding for accurate severity assessment. - Use Case: While testing a registration endpoint, intercept a successful submission, remove the g-recaptcha-response field, and replay the request — if the account is still created, you have confirmed missing server-side CAPTCHA validation. ## Quick Start Intercept a successful form submission with a CAPTCHA, resend it with the CAPTCHA field removed, and report whether the action still succeeds.