theqmaks/resolverThis extension integrates popular CAPTCHA solution services into BurpSuite to process different types of CAPTCHAs without manual intervention.
Automatically solve CAPTCHAs during web application security testing. Intercepts HTTP requests containing CAPTCHA placeholders, solves them via external providers, and injects the tokens — seamlessly integrating with Repeater, Intruder, and other Burp tools.
Requirements: Burp Suite 2024.x+, Java 21+, account with a supported CAPTCHA solving provider.
Insert placeholders into HTTP requests — reSolver will replace them with solved tokens:
{{CAPTCHA[:]TYPE[:]SITEKEY[:]URL[:][OPTIONAL_PARAMS]}}
The [:] separator avoids conflicts with colons in URLs and site keys.
| Type | Code | Optional Parameters |
|---|---|---|
| reCAPTCHA v2 | recaptchav2 | invisible, enterprise, timeout_seconds |
| reCAPTCHA v3 | recaptchav3 | action, min_score, enterprise, timeout_seconds |
| hCaptcha | hcaptcha | timeout_seconds |
| Cloudflare Turnstile | turnstile | timeout_seconds |
| FunCaptcha | funcaptcha | timeout_seconds |
| GeeTest v3 | geetest | timeout_seconds |
| GeeTest v4 | geetestv4 | timeout_seconds |
| AWS WAF | awswaf | timeout_seconds |
{{CAPTCHA[:]recaptchav2[:]6LfD3PIbAAAAAJs_eEHvoOl75_83eXSqpPSRFJ_u[:]https://example.com}}
{{CAPTCHA[:]recaptchav2[:]6LfD3PIb...[:]https://example.com[:]invisible,enterprise}}
{{CAPTCHA[:]recaptchav3[:]6LcW00EU...[:]https://example.com[:]action=login,min_score=0.7}}
{{CAPTCHA[:]hcaptcha[:]a1b2c3d4-e5f6...[:]https://example.com}}
{{CAPTCHA[:]turnstile[:]0x4AAAAAAA...[:]https://example.com}}
As you browse, reSolver automatically detects CAPTCHAs in HTTP responses. Check the Detections tab — click Copy Placeholder and paste it into your request.
git clone https://github.com/TheQmaks/reSolver.git
cd reSolver
./gradlew build
The JAR will be in build/libs/.
git checkout -b feature/my-feature)