On December 3, 2014 Google introduced the new and improved No CAPTCHA reCAPTCHA which simplifies the human verification process and prevents bots from making automated signups and/or posting content on your sites.
On websites using this new API, a significant number of users will be able to securely and easily verify they’re human without actually having to solve a CAPTCHA. Instead, with just a single click, they’ll confirm they are not a robot.
– Google Security
So, here is how the new captcha looks like:
It is as simple as pressing a check box saying that you are not a robot. If for some reason it detects that you might be a bot after all, an additional box will popup with the all familiar reCAPTCHA which you will have to solve in order to prove that you are a real human. So far, the only extra feature is the easier signup for real human users, but how will bots deal with this new No CAPTCHA reCAPTCHA? Can we still beat it with a bot, lets say made with UBot? As soon as I read the announcement on the Google Online Security blog I decided to try if I can automate the process and bypass the No CAPTCHA reCAPTCHA.
Bypassing No CAPTCHA reCAPTCHA with UBot
For those of you who are unfamiliar with the software, UBot is a automation tool developed for Internet marketeers (and others) which enables you to automate tasks like account creation, posting on other sites and other common task that usually take a lot of time. So where do I start if not Google’s own service the URL shortener goo.gl. So in 5 minutes, using UBot and an captcha breaking service API, I was able to create this simple UBot script that bypasses the No CAPTCHA reCAPTCHA. Take a look at the video below:
Download the code
If you wish to download the UBot source code for this example, simply sign up for our mailing list and the link to our downloads folder will be emailed to you upon confirmation. If you sill do not own Ubot, you can grab the latest version of UBot Studio here and start developing your own bots.
A few final notes, although most commonly the captcha you have to solve after clicking “I am not a robot” is the old familiar reCAPTCHA, Google is already testing out some new and improved ways of detecting weather or not you are a bot or not. Even on their blog they have posted some additional examples where there is no reCAPTCHA, but instead some more user friendly methods like selecting all the images that are in some way related to a specific image. Although these kind of captchas can be a bit tricky to solve and will definitely require some kind of user input, eventually there will be some kind of human solving service that will automate that too. The cat and mouse game continues, score one for Google.