Proxied HTTP connection? | Together Java | Page 1

sacred tulipBOT Dec 28, 2023, 3:28 PM

#

<@&987246527741304832> please have a look, thanks.

marsh gate Dec 28, 2023, 3:36 PM

#

don't think we can help you because it looks like it can be used malicously

marble harbor Dec 28, 2023, 3:42 PM

#

It could be used malicously yes but its literally a vuln I found on all captchas which exist out there. And I wanna know if it would be working as good with proxies thats it. Related to the results I might be reporting the vuln to cloudflare and google because its literally a computer clicking "Iam not a robot"

marsh gate Dec 28, 2023, 3:55 PM

#

I don't understand the question btw, you want to run selenium through a proxy?

#

It loads up the web browser so there proxy would have to be in the browser itself

marble harbor Dec 28, 2023, 3:56 PM

#

Yh like, HTTP proxies yk

marsh gate Dec 28, 2023, 3:56 PM

#

The "I'm not a robot" check isn't detecting if a human/robot is clicking the button, that bit is the only a small bit of it

marble harbor Dec 28, 2023, 3:56 PM

#

So the request is being made by proxies and not by a local machine

marsh gate Dec 28, 2023, 3:56 PM

#

the actual "I'm not a bot" is handled by some other mechanism

marble harbor Dec 28, 2023, 3:56 PM

#

marsh gate The "I'm not a robot" check isn't detecting if a human/robot is clicking the but...

I know but it still works

#

You can bypass it

marsh gate Dec 28, 2023, 3:57 PM

#

if you run it on your local machine, yeah it will work

marble harbor Dec 28, 2023, 3:57 PM

#

Yh and the actual question is, if it will work with proxies either

marsh gate Dec 28, 2023, 3:57 PM

#

it'll stop asking for the captcha I think after the first pass anyway

marble harbor Dec 28, 2023, 3:57 PM

#

But idk how to make the code for it

marble harbor Dec 28, 2023, 3:57 PM

#

marsh gate it'll stop asking for the captcha I think after the first pass anyway

Nope

marsh gate Dec 28, 2023, 3:57 PM

#

so all your other attempts won't even have a captcha I think (unless explict)

marble harbor Dec 28, 2023, 3:58 PM

#

If its a CloudFlare UAM captcha it will not

#

And if the Cloudflare WAF is setup properly, every req will get a captcha

#

captcha

marsh gate Dec 28, 2023, 3:58 PM

#

okay

#

anyways, on your question - it's handled in the browser

#

when selenium runs, it opens a web browser, right?

marble harbor Dec 28, 2023, 3:59 PM

#

Yhhh

#

Uses chromebrowser

marsh gate Dec 28, 2023, 3:59 PM

#

it has no control over what happens next - it just does "open browser" > "go to url" > wait for something to happen > "click div"

#

think of it as a glorified mouse recorder

#

as part of your script, I guess you could update the proxy settings in your browser?

marble harbor Dec 28, 2023, 4:00 PM

#

Oh ok I see so it will not even get to clicking anything on a proxied request

marsh gate Dec 28, 2023, 4:00 PM

#

yeah exactly

marble harbor Dec 28, 2023, 4:00 PM

#

ok I see

marsh gate Dec 28, 2023, 4:00 PM

#

wait no

marble harbor Dec 28, 2023, 4:00 PM

#

?

marsh gate Dec 28, 2023, 4:00 PM

#

if the request is proxied in google chrome

#

that does not matter to selenium

marble harbor Dec 28, 2023, 4:00 PM

#

How do you do that

marsh gate Dec 28, 2023, 4:01 PM

#

just checked

#

it uses the default OS proxy

#

so on windows, press start > network > proxy

marble harbor Dec 28, 2023, 4:02 PM

#

Ok ok but uh specifying an array or file with proxies in and sending the traffic through them is not a option at all right

#

Because there is no browser basically

marsh gate Dec 28, 2023, 4:02 PM

#

yeah if you wanna do it that way, you shouldn't use selenium

#

but instead use raw http requests

marble harbor Dec 28, 2023, 4:03 PM

#

ok ye idk how to change the code to use actual HTTP requests cuz javas behaviour is very weird with that

#

Cuz I dont think you can specify Options then right

marsh gate Dec 28, 2023, 4:03 PM

#

https://docs.oracle.com/en/java/javase/11/docs/api/java.net.http/java/net/http/HttpClient.html

#

I mean like this

#

so you create a HttpClient and open a connection to your url

marble harbor Dec 28, 2023, 4:04 PM

#

yeah

marsh gate Dec 28, 2023, 4:04 PM

#

the response will the html response right

#

now when you press a button/link or whatever normally, this would change the URL

#

in some cases like login, it'll prompt the capcha block but what you want to do then is send the http request that "i'm not a bot" does

#

it's a bit complicated though

marble harbor Dec 28, 2023, 4:05 PM

#

yh i see

#

would you recommend using asyncho or syncho

marsh gate Dec 28, 2023, 4:05 PM

#

whatever you feel comfortable with

marble harbor Dec 28, 2023, 4:06 PM

#

ok

marsh gate Dec 28, 2023, 4:06 PM

#

async probably

marble harbor Dec 28, 2023, 4:06 PM

#

Can you even set a proxy with async then

marsh gate Dec 28, 2023, 4:06 PM

#

yeah async/sync is just a way of execution

marble harbor Dec 28, 2023, 4:06 PM

#

ah kk

marsh gate Dec 28, 2023, 4:06 PM

#

proxy is a config

marble harbor Dec 28, 2023, 4:07 PM

#

But i will still need selenium to execute the actual command to click the div right

marsh gate Dec 28, 2023, 4:07 PM

#

when you click the div, what does it do?

#

does it send a request?

#

generate a code?

#

set a cookie?

marble harbor Dec 28, 2023, 4:08 PM

#

uh nah it just clicks it basically

#

And cloudflare / google will validate the captcha bc of the options it sends

marsh gate Dec 28, 2023, 4:08 PM

#

you could try the java web browser stuff

#

and hook that up with selenium

marble harbor Dec 28, 2023, 4:09 PM

#

If you remove this option, it will become a captcha loop basically

#

ok but this helped already I guess I didnt know that theres such an easy module like HTTPClient for requests.

#

And you can use this one for Synchro also right? Like you can use every option for either HTTPClient and HTTPRequest

marsh gate Dec 28, 2023, 4:21 PM

#

sorry not gonna help further because it's not a vuln

#Proxied HTTP connection?