data_exfiltration
Data exfiltration attempt
Line 157Snippets
Minimal HTTP server (no Express). Serves templated CAPTCHA page on GET /, receives token on POST /token. Writes token to `/tmp/captcha-relay-token.txt` and resolves a Promise. } else if (req.method === 'POST' && req.url === '/token') {exec_call
System command execution
System command execution
Line 1598Snippets
const proc = spawn('npx', ['localtunnel', '--port', String(localPort)], { const proc = spawn('cloudflared', ['tunnel', '--url', `http://localhost:${localPort}`], { const ip = execSync('tailscale ip -4 2>/dev/null', { timeout: 3000 }).toString().trim();privilege_escalation
Privilege escalation attempt
Privilege escalation attempt
Line 363Snippets
sudo tailscale upsudo tailscale upinstall_script
Third-party install script executed on the fly
Third-party install script executed on the fly
Line 360Snippets
curl -fsSL https://tailscale.com/install.sh | shcurl -fsSL https://tailscale.com/install.sh | shfs_write
Filesystem write access
Filesystem write access
Line 608Snippets
fs.writeFileSync(outPath, annotated); fs.writeFileSync(tokenFile, token);network_call
Outbound network call
Outbound network call
Line 360Snippets
curl -fsSL https://tailscale.com/install.sh | sh http.get(`http://127.0.0.1:${port}/json/version`, (res) => { http.get(`http://127.0.0.1:${port}/json/list`, (res) => {curl -fsSL https://tailscale.com/install.sh | shfs_read
Filesystem read access
Filesystem read access
Line 938Snippets
const html = fs.readFileSync(TEMPLATE, 'utf-8') template = fs.readFileSync(templateFile, 'utf-8');websocket
WebSocket connection
WebSocket connection
Line 873Snippets
this.ws = new WebSocket(this.wsUrl, { perMessageDeflate: false }); const ws = new WebSocket(wsUrl, { perMessageDeflate: false }); this.ws = new WebSocket(this.wsUrl, { perMessageDeflate: false });Trust Score
Updated há 2 semanas
Analisado
31 de mar. de 2026, 15:58
+ 2 previous scans
Compatível com
Skill details
Updated há 2 semanas
Analisado 31 de mar. de 2026, 15:58
Descricao
"Human-in-the-loop CAPTCHA solving with two modes: screenshot (default, zero infrastructure) and token relay (requires network access). Screenshot mode captures the page with a grid overlay, sends it to the human, and injects clicks based on their reply. Token relay mode detects CAPTCHA type + sitekey, serves the real widget on...
Scans recentes
31 de mar. de 2026, 15:58
Latest analysis
31 de mar. de 2026, 15:11
Run 2
27 de mar. de 2026, 15:43
Run 1