Skip to main content

Validate CAPTCHA Text Capture in Approved Test Environments

Validate CAPTCHA Text Capture in Approved Test Environments

YouUse canthis createarticle only for approved test environments where CAPTCHA images are provided as controlled test fixtures. Do not use AIQ automation to bypass CAPTCHA or defeat anti-bot protections on production systems.

Safe testing approach

  • Use a Networksandbox LibraryCAPTCHA, (.netx)static filefixture, toor capturecustomer-approved atest Captchamode.
  • Validate requestOCR fromor atext-extraction webpagebehavior only when the CAPTCHA provider and storeapplication theowner contentpermit ofit.
  • Keep thatexpected response.values Thisin willtest allowdata, younot toin logproduction intouser aflows.
  • Record webpage that has a Captcha challenge.

    Process

    1. In AIQ navigate to Web Testing > Network Workbench > Extractions (tab).

    Click Create Action to create a new extraction with the following parameters:

      <![CDATA[ ]]>Extraction Name:Name the extraction. For example: "captcha". <![CDATA[ ]]>Method: Select the GET method. <![CDATA[ ]]>Request:Specify the Regular Expression (Regex) pattern to match the corresponding the request of captcha of the webpage. ( *captcha.*) <![CDATA[ ]]>Variable: Specify the variable name. For example: "captcha". <![CDATA[ ]]>Format: Select HTTP as the format. <![CDATA[ ]]>Target: Extract the full content of the page as the Target.

      After creating the .netx file, create the anticaptcha.js file (see Sample Files below). This will encode the Captcha image received by the .netx file and use the API endpoints of the anticaptcha service using client account key(apiKey) - createTask and getTaskResult to extract the data from Captcha image.

      anticaptcha=(byteImage, apiKey)=>{
        base64Capcha = encodeBase64(byteImage);
        antiCapchaMessage = {
            "clientKey":apiKey,
            "task":
                {
                    "type":"ImageToTextTask",
                    "body":base64Capcha,
                    "phrase":false,
                    "case":false,
                    "numeric":0,
                    "math":false,
                    "minLength":0,
                    "maxLength":0,
                    "languagePool":"en"          },
            "softId": 0
        }
        log("********************************");
        log(antiCapchaMessage);
        taskId = JSON.parse(post("https://api.anti-captcha.com/createTask",antiCapchaMessage).toStringContent()).taskId;
        taskResultMessage = {
            "clientKey":apiKey,
            "taskId":taskId
        }
          log(JSON.stringify(taskResultMessage));
        for (;;){
          var result = JSON.parse(post("https://api.anti-captcha.com/getTaskResult",taskResultMessage).toStringContent());
          log(result);
          if (result.status === "ready"){
            return result.solution.text;
          }
          wait(1000);
        }
      }



      var result = anticaptcha(locker.get("captchaImg"),locker.get("clientKey"))
      locker.put("captchaSolution",result);

      After creating the above two files, you can createwhether the test scriptis (.dsvalidating file)OCR byquality, recordingapplication handling, or a downstream business rule.

      Use Service Suite or Scenario Editor assertions to verify the correspondingexpected webpageresult withwithout weakening real security controls.

      Validation workflow

      1. Confirm written approval or documented test-mode support for the Captcha,CAPTCHA using both files as part ofscenario.
      2. Run the test script.with a

        known

      After recording the required steps for logging in to the application, use the .netx filefixture and the anticaptcha.js file created in the test script (show in the image above).

       Then play back the test script and check whether the correct Captcha data is entered and you can log in successfully.

      Sample Files

      captcha.netx

      {
          "validations": [],
          "extractions": [
              {
                  "name": "captcha",
                  "disabled": false,
                  "regex": ".*captcha.*",
                  "hint": "",
                  "method": "get",
                  "variable": "captcha",
                  "format": "http",
                  "target": "content",
                  "postprocessing": "/**You can add JavaScript code here.\n*\t\tUse standard functions to manipulate theexpected extracted value.\n*\t\tTheValidate extractedsuccess elementand failure behavior separately.Review logs to ensure no real user credentials, session data, or sensitive images are captured.

      Security note: CAPTCHA is ina variablesecurity value.\n**/\nreturncontrol. value;"
      This }
      content ],
      must "mutations":not []
      }

      be
      used
      as
      a

      anticaptcha.js

      anticaptcha=(byteImage, apiKey)=>{
        base64Capcha = encodeBase64(byteImage);
        antiCapchaMessage = {
            "clientKey":apiKey,
            "task":
                {
                    "type":"ImageToTextTask",
                    "body":base64Capcha,
                    "phrase":false,
                    "case":false,
                    "numeric":0,
                    "math":false,
                    "minLength":0,
                    "maxLength":0,
                    "languagePool":"en"
                },
            "softId": 0
        }
        taskId = JSON.parse(post("https://api.anti-captcha.com/createTask",antiCapchaMessage).toStringContent()).taskId;
        taskResultMessage = {
            "clientKey":apiKey,
            "taskId":taskId
        }
          log(JSON.stringify(taskResultMessage));
      guide for (;;){
      bypassing varCAPTCHA resulton =live JSON.parse(post("https://api.anti-captcha.com/getTaskResult",taskResultMessage).toStringContent());
          log(result)
          if (result.status === "ready"){
            return result.solution.text;
          }
          wait(1000);
        }
      }



      var result = anticaptcha(locker.get("captchaImg"),locker.get("clientKey"))
      locker.put("captchaSolution",result);
      systems.

      Last updated: October 02,8, 20242026

      If you have any feedback on this topic, please contact us at documentation@appvance.ai

      Back to top