The tale of how hCaptcha broke avito.ru

hCaptcha an invigorating connection comes to us, a dance with tambourines we have a real

Hi, Habr!

Sit back, make yourself a seagull, for I write a little tightened and through the right ear. So, are you ready? Fine, then let's get started.

ATTENTION! An article written below may contain redundant information, links, pictures, etc. etc.

I'll start, perhaps, from afar. A couple of days ago I installed an OpenWRT router on my router and immediately rolled dnscrypt and tor on it with blackjack bypassing the locks . Thanks to this, I got rid of most of the advertising and got access to the blue butterfly without installing unnecessary software on my virgin clean PC. In short, I was pleased.

My face
image

However, I found a regrettable moment. The famous flea market began to appear ... crooked. All sites plow, but she doesn’t.

Spoiler heading
image

As a reasonable person, I got into digging into the DNS settings of the router, because before everything worked better . So, I violated the first commandment of the programmer: "It works - do not touch!" Actually, this is how I spent the night, without coming to anything.

In the morning, as an experienced programmer, I decided to go from the other side and tried to go through the anus of Tor Browser . And, lo and behold, I did it. Next, I started comparing logs through my connection and through tor. In the end, I found this:

Failed to load resource: the server responded with a status of 403 ()
image

After a short search, I found out that the problem is in DNS and again got into digging into the settings of the router and computer. He even called the provider, by the way, in the Moscow beehive, it seems that funny monkeys are working, and I judge this by the rich experience of interacting with them, and not by the last appeal.

Forgive the monkeys
image

So, I returned to where I started. Namely, to error 403, which says that in theory I can not access the js script. Well, I think, let's see what kind of scripts they are, which cannot be obtained. I follow the link to the script:

image

And I see. Pam-pam-paaaam. The page for checking the robot, and now there is the newfangled hCaptcha:

Verification Page
image

As a result, he passed the test, returned to Avito and reloaded the page. And I see that everything has returned to normal.

Home page avito.ru
image

In conclusion, we have that the problem was not in the router or provider. And in the new captcha, that, frankly, I already hated it. I decided to share my story, maybe someone will help.

Thank you for watching.

Regards,
Alrott SlimRG

All Articles