Paid Advertising is
ha.ckers sla.cking
How robots and spiders are causing issues, how to stop them. We can also talk about Completely Automated Public Turing Test To Tell Computers And Humans Apart - their use, their compliance issues, porn proxies, PWNtcha and other ways to defeat them. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
Scanning CAPTCHA Enabled Sites
Posted by: spivey
Date: August 31, 2009 05:14PM

Was wondering if anyone had any advice on the best way to attempt to scan sites that have CAPTCHA enabled. In this case, its a little bit interesting in that the site that we're scanning basically consists of one URL that submits registration information off to another site and that site returns a confirmation. This one page is CAPTCHA enabled and there's no way of getting around that. We're scanning with WebInspect and, while they have a recommended method of running 'interactive scans' by recording a web form, it simply prompts us over and over for the CAPTHA code in order to run through its sleuth of checks.

Is there another tool or recommended testing method to effectively scan a site like this? Thanks.

Options: ReplyQuote
Re: Scanning CAPTCHA Enabled Sites
Posted by: thrill
Date: August 31, 2009 05:39PM

moved thread because it doesn't belong in "Introductions".



It is not the degrees you hold, but the mind you possess. - thrill

Options: ReplyQuote

Sorry, only registered users may post in this forum.