General Information

CAPTCHA Rainbow Tables

Variants:
Direct 

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Application

Affected Mechanisms:
Session Management, Anti-Automation, Secure Design

Invented In:
28/02/2012

Added In:
19/12/2014


Vector Operation Method:
Use rainbow tables to bypass an improper implementation of a CAPTCHA in which the challenge identifier is in fact a representation of the actual answer, such as a hash, simple encryption, encoding, etc.


Direct Variant:

CAPTCHA Rainbow Tables

Variant Title:
CAPTCHA Rainbow Tables

Typical Severity:
Medium

Learn More: