OpenAgentSkill Registry Manifest
Skill: hunt-captcha-bypass
Slug: elementalsouls-hunt-captcha-bypass
Category: automation
Description: Hunt CAPTCHA Bypass — 6 distinct patterns: (1) CAPTCHA field simply omitted from the request (server-side validation absent), (2) CAPTCHA token replayed from a solved challenge (no single-use enforcement), (3) CAPTCHA response accepted on a different endpoint than it was solved on (no binding to action/session), (4) static or predictable CAPTCHA values accepted (e.g. '0', 'null', empty string), (5) audio/accessibility CAPTCHA trivially solvable programmatically, (6) CAPTCHA only enforced after N failures (first N requests bypass it). Detection: intercept a successful form submission, remove the CAPTCHA field entirely, replay — if it still succeeds, server-side validation is absent. Medium severity standalone; High when it removes the only rate-limit gate protecting a login, registration, or payment endpoint.

Agent fit:
- Decision: 94/100 Production-ready
- Primary fit: Research agents
- Role: Primary pick

Supply profile:
- Track: Coding and developer agents
- Scenario: Testing and QA
- Applicable agents: Claude Code, CLI, Codex, Cursor
- Maintenance: 7d since push
- Risk: Needs review

Trust:
- Trust score: 81/100 Strong shortlist
- Audit: 86/100 Needs review

Attribution:
- Status: Registry indexed
- Source: github fast track
- Creator: elementalsouls
- Claim URL: https://www.openagentskill.com/skills/elementalsouls-hunt-captcha-bypass#claim-this-skill

Install:
npx skills add elementalsouls/Claude-BugHunter --skill hunt-captcha-bypass

URLs:
- Web: https://www.openagentskill.com/skills/elementalsouls-hunt-captcha-bypass
- API: https://www.openagentskill.com/api/agent/skills/elementalsouls-hunt-captcha-bypass
- Install API: https://www.openagentskill.com/api/skills/elementalsouls-hunt-captcha-bypass/install
- Repository: https://github.com/elementalsouls/Claude-BugHunter/tree/main/skills/hunt-captcha-bypass