简体中文(ZH-CN) English(EN) 繁体中文(ZH-TW) 日本語(JA) 한국어(KO) Melayu(MS) Français(FR) Deutsch(DE)
Home> Backend Development> PHP Tutorial> body text

Ideas for cracking and anti-cracking verification codes

WBOY
Release： 2016-07-25 08:51:05
Original
1511 people have browsed it
There is only one way to use PHP to crack the verification code, which is to collect the signatures of characters appearing in the verification code, and then find a way to separate the characters in the verification code. What kind of artificial intelligence is obviously something that PHP cannot do, so as long as you can collect all the signatures of the characters that appear in the verification code and find a way to separate the characters in the verification code, you can crack it.
The anti-cracking idea mainly revolves around these two steps, using more characters, such as Chinese, and using more fonts and deformations, so that the same character has multiple feature codes, or there is no fixed feature code. Increase the difficulty of separating characters. The position, size and spacing of characters appearing in the verification code are not fixed. Interference pixels must be able to play a role.
The following takes the verification code of a certain website as an example to explain how to crack the verification code through the above two steps.
Note: Part of the code comes from phper "Baba", special thanks!
  1. /* Sort the numerical values and find the second most element, because the first most element is the background color, and the second most is the character color. In other words, if each character They all use different colors, or the background color is not so monotonous. How can I separate the character colors? */
  2. function getMostRepeated($array){
  3. $count = array_count_values($array);
  4. arsort($count);
  5. $keys = array_keys($count);
  7. return $keys[1];
  8. }
  9. / * Read the verification code image, read the pixel RGB into a two-dimensional array, and then separate the valid characters */
  10. function fixImg($url){
  11. $img = imagecreatefrompng($url);
  13. $with = imagesx($ img);
  14. $height = imagesy($img);
  15. $middle = $height / 2;
  17. $colors = array();
  19. for ($i = 0; $i < $with; ++$ i) {
  20. $color = imagecolorat($img, $i, $middle);// Read the pixel color of the center line, the center line will definitely cut into the characters. . .
  21. $colors[] = $color;
  22. }
  24. $mainColor = getMostRepeated($colors);//Separate the character color
  25. $pic = array();
  27. for ($x = 0; $x < $ with; ++$x) {
  28. $flag = true;
  29. for ($y = 0; $y < $height; ++$y) {
  30. $currentColor = imagecolorat($img, $x, $y) ;
  31. $pos = 0;// The original image is in italics. In order to facilitate character separation, it is converted into regular font, so using italics is useless. . .
  32. if($y < 16){
  33. $pos = 0;
  34. }elseif($y >= 16 && $y <= 20){
  35. $pos = 1;
  36. $pic[$y][0 ] = 0;
  37. }elseif($y >= 21 && $y <= 26){
  38. $pos = 2;
  39. $pic[$y][0] = $pic[$y][1] = 0;
  40. }else{
  41. $pos = 3;
  42. $pic[$y][0] = $pic[$y][1] = $pic[$y][2] = 0;
  43. }
  44. // Because the colors of interference pixels and characters are completely different, it is easy to separate the character color and set the character pixel point to 1, so at least part of the interference pixel color must be the same as the character color!
  45. if ($currentColor !== $mainColor) {
  46. $pic[$y][$x+$pos] = 0;
  47. }else{
  48. $pic[$y][$x+$pos] = 1;
  49. $flag = false;
  50. }
  51. }
  52. }
  54. return $pic;
  55. }
  56. // The legendary feature code
  57. $char = array(
  58. 'A'=>'000000000000000000010000000000000000001011000000000000000111110000000000000001110100000 000000001111100000000000000111110000000000001011100110000000000111110000110000000001110100000110000000111100000000110000 00011111100000011000000011111111000110000000000011111110110000000000000111111100000000000000000111111100000000000000011 11111000000000000000011111110000000000000000001110000000000000000000110',
  59. 'B'=>'11111111111111111111011111111111111 1111110111111111111111111110110000000110000000110110000000110000000110110000000110000000110110000001110000000110111000011 1110000001101111111110011000111100111111000111111100001110 100000000000000111101000',
  60. 'C'=>'000001011110 000000000000011111111111110000000111111111111100000011101000011111110000111000000000000111000110000000000000011000110000 00000000001110110000000000000001110110000000000000000110110000000000000000110110000000000000000011011000000000000000011011 0000000000000000110110000000000000001100011000000000000001100011000000000000011000',
  61. 'D '=>'111111111111111111110111111111111111111110111111111111111111110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110111000000000000001110011000000000000011100011110000000000111100001111000000001111000000111111111111111000000011111111111100000000000111111110000000',
  62. 'E'=>'111111111111111111110111111111111111111110111111111111111111110110000000110000000110110000000110000000110110000000110000000110110000000110000000110110000000110000000110110000000110000000110110000000110000000110110000000000000000110000000000000000000110',
  63. 'F'=>'111111111111111111110111111111111111111110111111111111111111110110000000110000000000110000000110000000000110000000110000000000110000000110000000000110000000110000000000110000000110000000000110000000110000000000110000000000000000000',
  64. 'G'=>'000001011110000000000000011111111111110000000111111111111110000001110100001111111000011100000000000011100011000000000000001100011000000000000001110110000000000000001110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000001111111110011000000001111111100011000000001111111100',
  65. 'H'=>'111111111111111111110111111111111111111110111111111111111111110000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000111111111111111111110111111111111111111110111111111111111111110 ',
  66. 'I'=>'111111111111111111110111111111111111111110111111111111111111110',
  67. 'J'=>'111111111111111111111111111111111111111111111111111111111111110',
  68. 'K'=>'111111111111111111110111111111111111111110111111111111111111110000000000110000000000000000001110000000000000000011011000000000000001111001110000000000011110001111000000000111100000111100000001110000000001110000011100000000000111000111000000000000011100110000000000000001110100000000000000000110000000000000000000010',
  69. 'L'=>'111111111111111111110111111111111111111110111111111111111111110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110',
  70. 'M' =>'1111111111111111111101111111111111111111101111110000000000000001111110000000000000000011111111000000000000000011111 1000000000000000011111110000000000000000111110000000000000 000111111000000000000000001111000000000000000111110000000000 00101110000000000000011111000000000000111111010000000000001111000000000000001110000000000000000001111111111111111110111 1111111111111111011111111111111111110',
  71. 'N'=>'11111111110111111111111111111011111000000000000000011111 0000000000000000011110000000000000000001110000000000000000 00111100000000000000000011110000000000000000000111000000000000 00000000111000000000000000000111110000000000000000111110000000000000000001111000000000000000000000111101111111111111111111 1011111111111111111110',
  72. 'O'=>'0000010111100000000000000 111111111110000000011111111111100000011101000000111110000 111000000000000111000110000000000000110001100000000000000111 0110000000000000000110110000000000000000110110000000000000001 10110000000000000000110110000000000000000110111000000000000000110011000000000000011100011110000000000011110000111100000000 111100000011111111111111000000001111111110000000000011111 1110000000',
  73. 'P'=>'1111111111111111111011111111111111111 111011111111111111111101100000000110000000011000 000000110000000011000000000110000000011000000011100 000000011110000111000000000001111111100000000000011111111000000000000000111110000000000000',
  74. 'Q'=>'000001011110000000000000011111111111100000000111111111111110000001110100001111111000011100000000000011100011000000000000001100010000000000000001110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110111000000000000000111011000000000000011111011110000000000111101001111000000001111001000111111111111110000000001111111111000000000000111111110000000',
  75. 'R'=>'111111111111111111110111111111111111111110111111111111111111110110000000110000000000110000000110000000000110000000110000000000110000000110000000000110000001111100000000111001011101111000000111111111001111110000011111111000011110000001110110000000111100000000000000000001110000000000000000001110000000000000000000010',
  76. 'S'=>'000111000000000001000001111110000000001100011111111000000001100011000111100000000110110000011110000000110110000001110000000110110000001110000000110110000000111000000110110000000011100011100111000000011111111100011000000001111111000000000000001111100000',
  77. 'T'=>'110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000111111111111111111110111111111111111111110111111111111111111110110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000',
  78. 'T '=>'110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000111111111111111111110111111111111111111110111111111111111111110110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000',//vt时t左边会被侵占掉一列
  79. 'U'=>'111111111111111110000111111111111111110000111111111111111111100000000000000000001100000000000000000001110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000001100000000000000000111100111111111111111111000111111111111111000000',
  80. 'V'=>'111100000000000000000111111000000000000000111111111000000000000000001111110000000000000000111111100000000000000000111111110000000000000001111111000000000000000001111110000000000000000011110000000000000001111110000000000010111101000000000000111110000000000001011111000000000000111111000000000000001110100000000000000111100000000000000000',//少读一列
  81. 'W'=>'111111000000000000000111111111000000000000111111111110000000000000000111111111110000000000001111111110000000000000001111111110000000000000000111110000000000000011111110000000001111111001000000011111111100000000011111110000000000000111111000000000000000111111000000000000000111111111110000000000000000111111111110000000000011111111111000000000000001111111110000000000000000111110000000000000011111110000000001111111001000000011111111100000000001111111000000000000111110100000000000000',
  82. 'X'=>'000000000000000000010110000000000000000110111100000000000011100111111000000000111000001111000000001100000000011110000011000000000000111110110000000000000111111100000000000000001111000000000000000001111100000000000001111001111000000000011110001111110000000111100000011110000001110000000000111100011100000000000001110110000000000000001110100000000000000000010',
  83. 'Y'=>'110000000000000000000111100000000000000000111111000000000000000001111000000000000000000011111000000000000000000111110000000000000000111111111111110000000000111111111110000000001111111111110000000011100000000000000001111000000000000000111100000000000000001110000000000000000011100000000000000000110000000000000000000100000000000000000000',
  84. 'Z'=>'000000000000000000110110000000000000011110110000000000001111110110000000000011111110110000000000111100110110000000011110000110110000000111100000110110000011111000000110110001111100000000110110011111000000000110110111100000000000110111110000000000000110111100000000000000110111000000000000000110',
  85. '0'=>'000001011110100000000000111111111111110000001111111101111110000011100000000000011100011000000000000001100110000000000000001110110000000000000000110110000000000000000110110000000000000000110111000000000000011100011111000000000111100001111111110111111000000011111111111100000000000111111110000000',
  86. '1'=>'001100000000000000110001100000000000000110011000000000000000110011000000000000000110011111111111111111110011111111111111111110111111111111111111110000000000000000000110000000000000000000110000000000000000000110000000000000000000110',
  87. '2'=>'000000000000000000110001100000000000111110011000000000000111110011000000000001101110110000000000011000110110000000000111000110110000000001110000110110000000011100000110111000000111000000110111100001111000000110011111111100000000110001111111000000000110000111110000000000110',
  88. '3'=>'011000000000000001100010000000000000001100110000000110000000110110000000110000000110110000000110000000110110000000110000000110110000001110000000110111000011011000001110111111111011000011100011111110001111111100001110100001111111000000000000000111101000',
  89. '4'=>'000000000000110000000000000000011110000000000000000111110000000000000001100110000000000001111000110000000000011110000110000000000111100000110000000001110000000110000000011100000000110000000111111111111111111110111111111111111111110111111111111111111110000000000000110000000000000000000110000000000000000000110000000',
  90. '5'=>'111111111000000001100111111111000000001110110000011000000000110110000011000000000110110000011000000000110110000011000000000110110000001100000000110110000001110000001110110000001110000111100110000000111111111100110000000011111111000110000000001111100000',
  91. '6'=>'000001011110111000000000011111111111110000001111111111111111000001110100101000011100011000001100000001100011000001000000001110110000011000000000110110000011000000000110110000011000000000110110000011100000000110110000011110000011100111000001111111111100011000000111111111000000000000001111000000',
  92. '7'=>'110000000000000000000110000000000000000010110000000000000111110110000000000011111110110000000000111111100110000000011111000000110000001111100000000110000011101000000000110001111000000000000110111110000000000000111110000000000000000111100000000000000000111000000000000000000',
  93. '8'=>'000000000000011110000000111000000111111000001111110011111111100011111111111100001100011000111111000001110110000011100000000110110000011110000000110110000001110000000110110000001111000000110111001011111000000110111111110011100011100011111110001111111100001110100001111111000000000000000111100000',
  94. '9'=>'000011111100000000000001111111110000001100001111111110000001100011100000111000000110111000000011100000110110000000001100000110110000000001100000110110000000001100000110110000000001100001100111000000011000011100011111000111001111000001111111111111111000000111111111111000000000000111111110000000',
  95. );
  97. $arr = fixImg("https://xxxxxxxxxx");// 哦，这里隐去某社区域名和验证码地址，为了支持https，你的php环境要开启openssl
  98. for($i = 0;$i < 10;$i++)
  99. unset($arr[$i]);// 前10行是空白
  101. $y = 0;// 采用从上到下，从左到右顺序读特征码，从第0行开始（实际是第10行）
  102. $len = 31;// 多读一行，JQ超过20行，且J后面几行占了上个字符的位置
  103. $code = array();// 分离出来的字符特征码
  104. $str = '';
  106. while($y < count($arr[10])){
  107. $flag = true;// 全0是空白竖线
  108. $line = '';
  109. for($i = 10;$i < $len;$i++){
  110. if($arr[$i][$y])
  111. $flag = false;
  112. $line .= $arr[$i][$y];
  113. }
  114. $isw = false;
  115. $isy = false;
  116. // 对vw的特殊处理
  117. if($str === $char['V'] || $str === $char['W']){
  118. $flag = true;
  119. $isw = true;
  120. }elseif($str === $char['Y'] || $str === $char['A']){
  121. $isy = true;
  122. $flag = true;
  123. }
  125. if($flag){
  126. if(strlen($str) > 21)
  127. $code[] = $str;
  128. $str = '';
  129. }else{
  130. $str .= $line;
  131. }
  132. if($isw){
  133. $str = '00'.substr($line,2,strlen($line));
  134. if($str === '000000000000000000000')
  135. $str = '';
  136. $isw = false;
  137. }
  138. if($isy){
  139. $str = $line;
  140. if($str === '000000000000000000000')
  141. $str = '';
  142. $isy = false;
  143. }
  144. $y++;
  146. }
  148. // 输出字符
  149. foreach($code as $v){
  150. $match = false;
  151. foreach($char as $key => $v2){
  152. if($v === $v2){
  153. echo $key;
  154. $match = true;
  155. }
  156. }
  157. if(!$match)
  158. echo '?';// 没匹配到的字符输出问号
  159. }
复制代码


Related labels：
验证码破解和反破解的思路
source：php.cn
Previous article：Scan all pictures in a file directory, scale them and place them in another directory Next article：Original way of writing, returning a certain column or several columns of the array
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Articles by Author
Latest Issues
phpstorm registration code I couldn't use the registration verification address attached to the PHP Chinese website. ...
From 2018-07-05 11:23:36
0
6
5920
html - 在PHP里面textarea输入框会自动在'前增加反斜杠，如何解决？ 我做了一个PHP的文件，里面放了一个textarea输入框，但每次复制粘贴代码时，"和'前都会自动增加一个反斜杠，这个怎么破解啊？
From 2017-04-11 10:48:10
0
1
377
javascript - 论验证码安全性 验证码的作用就是为了强制人机交互，但是几乎所有的图片验证码都存在安全性问题，可以被机器轻易破解。现在主流的验证码识别技术就是图像识别，如果说我做一个无图验证码是不是就能很大程度上防...
From 2017-04-11 09:48:11
0
2
187
php - 给表单加token可以防暴力破解吗？ 前提：这里仅对token对防暴力破解的意义进行讨论，不涉及到其他防暴力破解措施，比如验证码等。看到很多文章都说加token可以防止暴力破解，但并没有说为什么。据小弟的认识，给表单加...
From 2017-04-10 17:31:14
0
7
393
html - 在PHP里面textarea输入框会自动在'前增加反斜杠，如何解决？ 我做了一个PHP的文件，里面放了一个textarea输入框，但每次复制粘贴代码时，"和'前都会自动增加一个反斜杠，这个怎么破解啊？
From 2017-04-10 17:21:58
0
1
298
Related Topics
More>
Popular Recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
About us Disclaimer Sitemap
php.cn：Public welfare online PHP training，Help PHP learners grow quickly！