Skip to content

BoarIncorporated/Funcaptcha-VM-Encryption

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
 
 
 
 
 
 

Repository files navigation

You need to AES encrypt the payload first just like you did for previous version and then rsa encrypt it

**Currently it's not possible to decrypt the BDA afterwards, you can obviously see it using breakpoints but it's pretty annoying

Note

You will still have to set breakpoints to get site-specifc presets

New BDA values

  • vsadsa
return window.navigation.entries().length
  • basfas
const p = window?.performance;
const m = p?.memory;
const limit = m?.jsHeapSizeLimit;

if (!p) return [1, null];
if (!m) return [2, null];
if (!limit) return [3, null];

return [0, limit];
  • lfasdgs
return window.arkl.cbid

There are also some new mechanisms to edit the bda values dynamically, for example you can see that screen_pixel_depth which is typically 24 on chrome is now 72, which is 24 * 3 this is caused by code that looks something like this:

let enhanced_fp = bda[4]?.value;

if (enhanced_fp[26]?.value) {
    enhanced_fp[26] = {
        key: enhanced_fp[26].key,
        value: enhanced_fp[26].value * 3
    };
}

this also happens for network_info_rtt_type on something like this:

let enhanced_fp = bda[4]?.value;

if (enhanced_fp?.[25] && enhanced_fp?.[1]?.value && enhanced_fp?.[18]?.value) {
    const webgl_extensions_hash = enhanced_fp[1].value;
    const webgl_hash_webgl = enhanced_fp[18].value;
    enhanced_fp[25].value = {
        key: enhanced_fp[25].key,
        value:
            typeof webgl_extensions_hash === "string" && webgl_extensions_hash.length > 12 &&
            typeof webgl_hash_webgl === "string" && webgl_hash_webgl.length > 12
                ? webgl_extensions_hash.slice(0, 3) + webgl_hash_webgl.slice(0, 3)
                : "abcdef"
    };
}

New values

  • ark-build-id: new header, you can find the value its set to in api.js, this header is only used in the /gt2/ request

Updated values

  • navigator_permissions_hash which was previously renamed in 3.5.0, has been reverted to its original name
  • bda -> c, again this is for the /gt2/ request
  • data[blob] used to not be set at all in the payload when there was no blob, now if there is no blob the value in tha payload is set to data[blob]: "undefined"

Known site-keys on 4.x.x

ALL SITES ABOVE VERSION 4 ARE NOW ON 4.0.10

Version Site Key Site Name RSA Key
4.0.10 BF5FA6C8-9668-4AF9-AFA2-E362F56E5B71 Twitter: arkose_challenge_lo_web_notification_dev Key will not be made public for now, contact me on telegram to get it
4.0.10 6A2FD110-7C1A-47CD-82EE-D01FFB4810D7 Twitter: arkose_challenge_lo_web_notification_mobile_prod Key will not be made public for now, contact me on telegram to get it
4.0.10 50706BFE-942C-4EEC-B9AD-03F7CD268FB1 Twitter: arkose_challenge_lo_web_notification_prod Key will not be made public for now, contact me on telegram to get it
4.0.10 DF58DD3B-DFCC-4502-91FA-EDC0DC385CFF Twitter: arkose_challenge_signup_web_dev Key will not be made public for now, contact me on telegram to get it
4.0.10 2F4F0B28-BC94-4271-8AD7-A51662E3C91C Twitter: arkose_challenge_login_web_prod Key will not be made public for now, contact me on telegram to get it
4.0.10 560C66A3-C8EB-4D11-BE53-A8232734AA62 Twitter: arkose_challenge_open_app_dev Key will not be made public for now, contact me on telegram to get it
4.0.10 006B5E87-7497-403E-9E0C-8FFBAAC6FA67 Twitter: arkose_challenge_signup_mobile_dev Key will not be made public for now, contact me on telegram to get it
4.0.10 867D55F2-24FD-4C56-AB6D-589EDAF5E7C5 Twitter: arkose_challenge_signup_mobile_prod Key will not be made public for now, contact me on telegram to get it
4.0.10 2CB16598-CB82-4CF7-B332-5990DB66F3AB Twitter: arkose_challenge_signup_web_prod Key will not be made public for now, contact me on telegram to get it
4.0.10 6627C16B-DA60-47A5-85F7-CFF23BD2BE69 Twitter: arkose_challenge_transparent_signup_dev Key will not be made public for now, contact me on telegram to get it
4.0.10 4CB8C8B0-40FF-439C-9D0D-9A389ADA18CB Twitter: arkose_challenge_transparent_signup_prod Key will not be made public for now, contact me on telegram to get it
4.0.10 0152B4EB-D2DC-460A-89A1-629838B529C9 Twitter: Unlock - https://x.com/account/access Key will not be made public for now, contact me on telegram to get it
4.0.10 C07CAFBC-F76F-4DFD-ABFA-A6B78ADC1F29 Twitter: Contact - https://help.x.com Key will not be made public for now, contact me on telegram to get it
4.0.10 63E4117F-E727-42B4-6DAA-C8448E9B137F Roblox: SUPPORT_REQUEST Key will not be made public for now, contact me on telegram to get it
4.0.10 CC30DB96-0C88-4DEB-86E5-6601927ACBB4 Roblox: GENERIC_CHALLENGE Key will not be made public for now, contact me on telegram to get it
4.0.10 1B154715-ACB4-2706-19ED-0DC7E3F7D855 Roblox: WEB_GAMECARD_REDEMPTION Key will not be made public for now, contact me on telegram to get it
4.0.10 476068BF-9607-4799-B53D-966BE98E2B81 Roblox: WEB_RESET_PASSWORD Key will not be made public for now, contact me on telegram to get it
4.0.10 A2A14B1D-1AF3-C791-9BBC-EE33CC7A0A6F Roblox: WEB_SIGNUP Key will not be made public for now, contact me on telegram to get it
4.0.10 07EAB4B8-2D80-4234-B897-A2CD1F194866 Snapchat: login (production) Key will not be made public for now, contact me on telegram to get it
4.0.10 EA4B65CB-594A-438E-B4B5-D0DBA28C9334 Snapchat: signup (production) Key will not be made public for now, contact me on telegram to get it
4.0.10 D99D7D11-158A-408C-A6C5-29F2B60EFADE Snapchat: wwwLogin (production) Key will not be made public for now, contact me on telegram to get it
4.0.10 FE9DC8DA-5E83-495F-A762-582267EEACDE Snapchat: login (development) Key will not be made public for now, contact me on telegram to get it
4.0.10 152E1D0C-D805-4060-A111-6AC82CA6821B Snapchat: signup (development) Key will not be made public for now, contact me on telegram to get it
4.0.10 C383A903-0809-41A2-A832-5F7ACC690EA6 Snapchat: wwwLogin (development) Key will not be made public for now, contact me on telegram to get it
4.0.10 B5B07C8C-F93F-44A8-A353-4A47B8AD5238 Tinder: web Key will not be made public for now, contact me on telegram to get it
4.0.10 EBC0462E-1FD4-25CD-A21E-A68A0E5DDB23 Tinder: banAppealKey Key will not be made public for now, contact me on telegram to get it
4.0.10 15485B1D-E5A1-0166-162C-FF8EBF968955 Tinder: onboardingKey Key will not be made public for now, contact me on telegram to get it
4.0.10 419899FA-7FAF-5C1D-C027-BC34963E3A4F Dropbox: Login Key will not be made public for now, contact me on telegram to get it
4.0.10 EEE19E8E-9269-2EBD-7AD5-EE149237BA46 LevelBlue Key will not be made public for now, contact me on telegram to get it
4.0.10 4D297134-67EC-B943-E0E9-79E2E0D9F8DB Singapore Airlines Key will not be made public for now, contact me on telegram to get it
4.0.10 05846D28-284B-8EC4-B45A-ACC6F6759588 Lively: Production Key will not be made public for now, contact me on telegram to get it
4.0.10 3F14A00E-105C-AAE6-0CC3-567568A0CF00 Lively: Development Key will not be made public for now, contact me on telegram to get it
4.0.10 33C384C0-7DE5-4243-80DB-2C5E35802C15 Expedia - Hotels.com: botOrNot Key will not be made public for now, contact me on telegram to get it
4.0.10 30000F36-CADF-490C-929A-C6A7DD8B33C4 Uber: Production Key will not be made public for now, contact me on telegram to get it
4.0.10 6375512B-BEE6-458C-87B0-3E4DEED2C5E3 Uber: Development Key will not be made public for now, contact me on telegram to get it
4.0.10 1BE2475D-0F5A-4188-B20A-A9943639840C Uber: unknown Key will not be made public for now, contact me on telegram to get it
4.0.10 717C7D7F-8ED2-4587-AF41-E7E34907A6FB Badoo - Bumble: phone - web - login Key will not be made public for now, contact me on telegram to get it
4.0.10 73C53A42-FEEA-4097-8B08-F9F3E8B143CE Badoo - Bumble: social (Facebook / Apple) - web - login Key will not be made public for now, contact me on telegram to get it
4.0.10 EE844FC3-499D-4A4D-A643-D7400F0FD4DE Payoneer: Production Key will not be made public for now, contact me on telegram to get it
4.0.10 7D76E2A2-89F4-4CD7-AB0E-416683BF595D Payoneer: Development Key will not be made public for now, contact me on telegram to get it
4.0.10 5B6F3411-4A78-4EC2-9223-16001F3B3E68 HP.com: arkose Key will not be made public for now, contact me on telegram to get it
4.0.10 9B8ED233-984B-4DE5-A7B6-3A370D9FF48B Wells Fargo: Production Key will not be made public for now, contact me on telegram to get it
4.0.10 3C5073B0-3106-423D-8D6B-81FE82CF5C2C Wells Fargo: Development Key will not be made public for now, contact me on telegram to get it
4.0.10 E3EFEFBF-8DE4-42ED-9E7F-92F35B1FD3CF UNKNOWN SITE Key will not be made public for now, contact me on telegram to get it
4.0.10 DE0B0BB7-1EE4-4D70-1853-31B835D4506B UNKNOWN SITE Key will not be made public for now, contact me on telegram to get it

Total keys: 45