Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
captcha-harvester
Advanced tools
captcha-harvester spins up a localhost server to harvest captchas from supremenewyork. Uses puppeteer project to open chromium browsers. Google account one click support via cookies. Cookies can be retrieved via a basic request to localhost:3001/fetch
. Captcha tokens are removed on successful fetch.
Installing from npm is the easiest way to get up and running.
npm: npm install captcha-harvester -g
yarn: yarn global add captcha-harvester
captcha-harvester supports a few commands to make things easy.
captcha-harvester -h|--help
- Returns all available commands.captcha-harvester init|initialize
- Initialize captcha preferences.captcha-harvester sg|setgoogle
- Set Google account to be used.captcha-harvester hc|harvestcaptcha --set [url] [sitekey]
- Starts localhost server to harvest captcha tokens.After installation to increase our likelihood of getting one-clicks, we are going to first initalize captcha-harvester with captcha-harvester init
then we can run captcha-harvester sg
to set the google account we are going to use. Your Google account information is stored locally in your appdata path.
captcha-harvester init
captcha-harvester sg
captcha-harvester hc
You now have a captcha-harvester running at localhost:3001
. To retrieve captcha tokens make a request to loclahost:3001/fetch
.
FAQs
Node cli to casually harvest captchas from supremenewyork
The npm package captcha-harvester receives a total of 17 weekly downloads. As such, captcha-harvester popularity was classified as not popular.
We found that captcha-harvester demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.