首页 / PHP / 验证码破解和反破解的思路

验证码破解和反破解的思路

内容导读

互联网集市收集整理的这篇技术教程文章主要介绍了验证码破解和反破解的思路，小编现在分享给大家，供广大互联网技能从业者学习和参考。文章包含14803字，纯文字阅读大概需要22分钟。

内容图文

使用php破解验证码，只有一种方法，就是收集验证码里出现字符的特征码，然后想办法分离出验证码里的字符。什么人工智能，显然是php做不到的，所以，只要能收集齐验证码里出现字符的特征码，又能找到方法分离出验证码里的字符，就可以破解。
反破解的思路也主要是围绕这两步，使用更多的字符，比如使用中文，使用更多的字体和变形，使得同一个字符有多个特征码，或者没有固定的特征码。增加分离字符的难度，字符出现在验证码中的位置不固定，大小不固定，间距不固定，干扰像素要能起到作用。
下面以某网站验证码为例，讲解如何通过以上两步破解验证码。
注：部分代码来源于phper“罢巴”，特别鸣谢！

<?php
/* 对数值数值进行排序，找到第二多的元素，因为第一多的元素是背景色，第二多才是字符颜色，换句话说，如果每个字符都使用不同的颜色，或者背景色不是那么单调，我还怎么分离出字符颜色呢？ */
function getMostRepeated($array){
$count = array_count_values($array);
arsort($count);
$keys = array_keys($count);
return $keys[1];
}
/* 读取验证码图片，并将像素RGB读入二维数组，然后分离出有效字符 */
function fixImg($url){
$img = imagecreatefrompng($url);
$with = imagesx($img);
$height = imagesy($img);
$middle = $height / 2;
$colors = array();
for ($i = 0; $i < $with; ++$i) {
$color = imagecolorat($img, $i, $middle);// 读取中线的像素颜色，中线肯定会切到字符。。。
$colors[] = $color;
}
$mainColor = getMostRepeated($colors);// 分离出字符颜色
$pic = array();
for ($x = 0; $x < $with; ++$x) {
$flag = true;
for ($y = 0; $y < $height; ++$y) {
$currentColor = imagecolorat($img, $x, $y);
$pos = 0;// 原图片用的是斜体，为了方便分割字符，转成正体，所以用斜体是没用的。。。
if($y < 16){
$pos = 0;
}elseif($y >= 16 && $y <= 20){
$pos = 1;
$pic[$y][0] = 0;
}elseif($y >= 21 && $y <= 26){
$pos = 2;
$pic[$y][0] = $pic[$y][1] = 0;
}else{
$pos = 3;
$pic[$y][0] = $pic[$y][1] = $pic[$y][2] = 0;
}
// 因为干扰像素和字符的颜色完全不同，轻而易举的分离出字符色，字符像素点置1，所以干扰像素颜色至少要有部分是和字符颜色相同才行！
if ($currentColor !== $mainColor) {
$pic[$y][$x+$pos] = 0;
}else{
$pic[$y][$x+$pos] = 1;
$flag = false;
}
}
}
return $pic;
}
// 传说中的特征码
$char = array(
'A'=>'000000000000000000010000000000000000010110000000000000001111100000000000000011101000000000000011111000000000000001111110000000000001011100110000000000111110000110000000001110100000110000000111100000000110000000111111000000110000000111111111000110000000000011111110110000000000000111111110000000000000000111111110000000000000001111111000000000000000011111110000000000000000001110000000000000000000110',
'B'=>'111111111111111111110111111111111111111110111111111111111111110110000000110000000110110000000110000000110110000000110000000110110000001110000000110111000011111000000110111111111001100011110011111110001111111100001110100001111111100000000000000111101000',
'C'=>'000001011110000000000000011111111111110000000111111111111110000001110100001111111000011100000000000011100011000000000000001100011000000000000001110110000000000000001110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000001100011000000000000001100011000000000000011000',
'D'=>'111111111111111111110111111111111111111110111111111111111111110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110111000000000000001110011000000000000011100011110000000000111100001111000000001111000000111111111111111000000011111111111100000000000111111110000000',
'E'=>'111111111111111111110111111111111111111110111111111111111111110110000000110000000110110000000110000000110110000000110000000110110000000110000000110110000000110000000110110000000110000000110110000000110000000110110000000000000000110000000000000000000110',
'F'=>'111111111111111111110111111111111111111110111111111111111111110110000000110000000000110000000110000000000110000000110000000000110000000110000000000110000000110000000000110000000110000000000110000000110000000000110000000000000000000',
'G'=>'000001011110000000000000011111111111110000000111111111111110000001110100001111111000011100000000000011100011000000000000001100011000000000000001110110000000000000001110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000001111111110011000000001111111100011000000001111111100',
'H'=>'111111111111111111110111111111111111111110111111111111111111110000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000111111111111111111110111111111111111111110111111111111111111110',
'I'=>'111111111111111111110111111111111111111110111111111111111111110',
'J'=>'111111111111111111111111111111111111111111111111111111111111110',
'K'=>'111111111111111111110111111111111111111110111111111111111111110000000000110000000000000000001110000000000000000011011000000000000001111001110000000000011110001111000000000111100000111100000001110000000001110000011100000000000111000111000000000000011100110000000000000001110100000000000000000110000000000000000000010',
'L'=>'111111111111111111110111111111111111111110111111111111111111110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110',
'M'=>'111111111111111111110111111111111111111110111111000000000000000111111100000000000000000111111110000000000000000111111000000000000000011111111100000000000000001111110000000000000000111111100000000000000000111100000000000000011111100000000000010111000000000000001111100000000000011111101000000000000111110000000000000011100000000000000000111111111111111111110111111111111111111110111111111111111111110',
'N'=>'111111111111111111110111111111111111111110111110000000000000000011111000000000000000000111100000000000000000001110000000000000000000111100000000000000000011110000000000000000000111000000000000000000001110000000000000000001111100000000000000000111110000000000000000001111000000000000000000011110111111111111111111110111111111111111111110',
'O'=>'000001011110000000000000011111111111100000000111111111111110000001110100000011111000011100000000000011100011000000000000001100011000000000000001110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110111000000000000000110011000000000000011100011110000000000111100001111000000001111000000111111111111111000000001111111111100000000000111111110000000',
'P'=>'111111111111111111110111111111111111111110111111111111111111110110000000011000000000110000000011000000000110000000011000000000110000000111000000000110000000111000000000111100001110000000000011111111100000000000011111111000000000000000111110000000000000',
'Q'=>'000001011110000000000000011111111111100000000111111111111110000001110100001111111000011100000000000011100011000000000000001100010000000000000001110110000000000000000110110000000000000000110110000000000000000110110000000000000000110110000000000000000110111000000000000000111011000000000000011111011110000000000111101001111000000001111001000111111111111110000000001111111111000000000000111111110000000',
'R'=>'111111111111111111110111111111111111111110111111111111111111110110000000110000000000110000000110000000000110000000110000000000110000000110000000000110000001111100000000111001011101111000000111111111001111110000011111111000011110000001110110000000111100000000000000000001110000000000000000001110000000000000000000010',
'S'=>'000111000000000001000001111110000000001100011111111000000001100011000111100000000110110000011110000000110110000001110000000110110000001110000000110110000000111000000110110000000011100011100111000000011111111100011000000001111111000000000000001111100000',
'T'=>'110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000111111111111111111110111111111111111111110111111111111111111110110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000',
'T '=>'110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000111111111111111111110111111111111111111110111111111111111111110110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000',//vt时t左边会被侵占掉一列
'U'=>'111111111111111110000111111111111111110000111111111111111111100000000000000000001100000000000000000001110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000000110000000000000000001100000000000000000111100111111111111111111000111111111111111000000',
'V'=>'111100000000000000000111111000000000000000111111111000000000000000001111110000000000000000111111100000000000000000111111110000000000000001111111000000000000000001111110000000000000000011110000000000000001111110000000000010111101000000000000111110000000000001011111000000000000111111000000000000001110100000000000000111100000000000000000',//少读一列
'W'=>'111111000000000000000111111111000000000000111111111110000000000000000111111111110000000000001111111110000000000000001111111110000000000000000111110000000000000011111110000000001111111001000000011111111100000000011111110000000000000111111000000000000000111111000000000000000111111111110000000000000000111111111110000000000011111111111000000000000001111111110000000000000000111110000000000000011111110000000001111111001000000011111111100000000001111111000000000000111110100000000000000',
'X'=>'000000000000000000010110000000000000000110111100000000000011100111111000000000111000001111000000001100000000011110000011000000000000111110110000000000000111111100000000000000001111000000000000000001111100000000000001111001111000000000011110001111110000000111100000011110000001110000000000111100011100000000000001110110000000000000001110100000000000000000010',
'Y'=>'110000000000000000000111100000000000000000111111000000000000000001111000000000000000000011111000000000000000000111110000000000000000111111111111110000000000111111111110000000001111111111110000000011100000000000000001111000000000000000111100000000000000001110000000000000000011100000000000000000110000000000000000000100000000000000000000',
'Z'=>'000000000000000000110110000000000000011110110000000000001111110110000000000011111110110000000000111100110110000000011110000110110000000111100000110110000011111000000110110001111100000000110110011111000000000110110111100000000000110111110000000000000110111100000000000000110111000000000000000110',
'0'=>'000001011110100000000000111111111111110000001111111101111110000011100000000000011100011000000000000001100110000000000000001110110000000000000000110110000000000000000110110000000000000000110111000000000000011100011111000000000111100001111111110111111000000011111111111100000000000111111110000000',
'1'=>'001100000000000000110001100000000000000110011000000000000000110011000000000000000110011111111111111111110011111111111111111110111111111111111111110000000000000000000110000000000000000000110000000000000000000110000000000000000000110',
'2'=>'000000000000000000110001100000000000111110011000000000000111110011000000000001101110110000000000011000110110000000000111000110110000000001110000110110000000011100000110111000000111000000110111100001111000000110011111111100000000110001111111000000000110000111110000000000110',
'3'=>'011000000000000001100010000000000000001100110000000110000000110110000000110000000110110000000110000000110110000000110000000110110000001110000000110111000011011000001110111111111011000011100011111110001111111100001110100001111111000000000000000111101000',
'4'=>'000000000000110000000000000000011110000000000000000111110000000000000001100110000000000001111000110000000000011110000110000000000111100000110000000001110000000110000000011100000000110000000111111111111111111110111111111111111111110111111111111111111110000000000000110000000000000000000110000000000000000000110000000',
'5'=>'111111111000000001100111111111000000001110110000011000000000110110000011000000000110110000011000000000110110000011000000000110110000001100000000110110000001110000001110110000001110000111100110000000111111111100110000000011111111000110000000001111100000',
'6'=>'000001011110111000000000011111111111110000001111111111111111000001110100101000011100011000001100000001100011000001000000001110110000011000000000110110000011000000000110110000011000000000110110000011100000000110110000011110000011100111000001111111111100011000000111111111000000000000001111000000',
'7'=>'110000000000000000000110000000000000000010110000000000000111110110000000000011111110110000000000111111100110000000011111000000110000001111100000000110000011101000000000110001111000000000000110111110000000000000111110000000000000000111100000000000000000111000000000000000000',
'8'=>'000000000000011110000000111000000111111000001111110011111111100011111111111100001100011000111111000001110110000011100000000110110000011110000000110110000001110000000110110000001111000000110111001011111000000110111111110011100011100011111110001111111100001110100001111111000000000000000111100000',
'9'=>'000011111100000000000001111111110000001100001111111110000001100011100000111000000110111000000011100000110110000000001100000110110000000001100000110110000000001100000110110000000001100001100111000000011000011100011111000111001111000001111111111111111000000111111111111000000000000111111110000000',
);
$arr = fixImg("https://xxxxxxxxxx");// 哦，这里隐去某社区域名和验证码地址，为了支持https，你的php环境要开启openssl
for($i = 0;$i < 10;$i++)
unset($arr[$i]);// 前10行是空白
$y = 0;// 采用从上到下，从左到右顺序读特征码，从第0行开始（实际是第10行）
$len = 31;// 多读一行，JQ超过20行，且J后面几行占了上个字符的位置
$code = array();// 分离出来的字符特征码
$str = '';
while($y < count($arr[10])){
$flag = true;// 全0是空白竖线
$line = '';
for($i = 10;$i < $len;$i++){
if($arr[$i][$y])
$flag = false;
$line .= $arr[$i][$y];
}
$isw = false;
$isy = false;
// 对vw的特殊处理
if($str === $char['V'] || $str === $char['W']){
$flag = true;
$isw = true;
}elseif($str === $char['Y'] || $str === $char['A']){
$isy = true;
$flag = true;
}
if($flag){
if(strlen($str) > 21)
$code[] = $str;
$str = '';
}else{
$str .= $line;
}
if($isw){
$str = '00'.substr($line,2,strlen($line));
if($str === '000000000000000000000')
$str = '';
$isw = false;
}
if($isy){
$str = $line;
if($str === '000000000000000000000')
$str = '';
$isy = false;
}
$y++;
}
// 输出字符
foreach($code as $v){
$match = false;
foreach($char as $key => $v2){
if($v === $v2){
echo $key;
$match = true;
}
}
if(!$match)
echo '?';// 没匹配到的字符输出问号
}

内容总结

以上是互联网集市为您收集整理的验证码破解和反破解的思路全部内容，希望文章能够帮你解决验证码破解和反破解的思路所遇到的程序开发问题。如果觉得互联网集市技术教程内容还不错，欢迎将互联网集市网站推荐给程序员好友。

内容备注

版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容，请发送邮件至 gblab@vip.qq.com 举报，一经查实，本站将立刻删除。

内容手机端

扫描二维码推送至手机访问。

本文链接：https://qyyshop.com/info/164239.html

来源：【匿名】

【上一篇】一个自认为很安全的PHP防SQL注入求破解【下一篇】PHP 5 数据对象 (PDO) 抽象层与 Oracle

更多 ►

【验证码破解和反破解的思路】教程文章相关的互联网学习教程文章

PHP 实现“贴吧神兽”验证码【代码】【图】

最早看到 “贴吧神兽” 验证码是在百度贴吧，吧主防止挖坟贴，放出了究极神兽验证码例如：地址：http://tieba.baidu.com/p/3320323440 可以用 PHP + JavaScript 实现该种类型的验证码。使用 jQuery 版本：jQuery 1.9.1框架使用 ThinkPHP 3.2.3，自定义的验证码类基于 TP 的验证码类最终效果图：自定义验证码类路径：/Application/Home/Common/VerivyPostBar.class.php控制器：/Application/Home/Controller/PostBarController.cl...

PHP实现验证码【代码】【图】

第一步：创建一个画布第二步：创建颜色第三步：准备字符第四步：往画布上写字符第五步：画干扰线（点）第六步：输出格式第七步：输出图片第八步：销毁资源<?php verify(); function verify($width = 100 , $height = 40 , $num = 5 , $type = 3 ){ //1 创建画布 $image = imagecreatetruecolor($width , $height); //2 创建颜色 //因为后边总是用，所以写了两个函数，分别是lightColor(浅颜色)、deepColor(...

PHP生成验证码第二弹，强势来袭【代码】

function getVerify(){ session_start(); ob_clean (); //清除缓冲区 header("Content-type:image/png"); $img_width=40; $img_height=20; srand(microtime()*100000); for($i=0;$i<4;$i++) { $new_number.=dechex(rand(0,15)); } $_SESSION[check_auth]=$new_number; $new_number=imageCreate($img_width,$img_height);//创建图象 ImageColorAllocate($new_number,255,255,255)...

PHPCMS v9 自定义表单添加验证码验证

1、在 \phpcms\templates\default\formguide\show.html 中添加验证码显示<input type="text" id="code" name="code" size="8" class="input-text">{form::checkcode(‘code_img‘, ‘4‘, ‘14‘, 84, 24)}2、在 \phpcms\modules\formguide\index.php 中修改具体如下<?phpdefined(‘IN_PHPCMS‘) or exit(‘No permission resources.‘);define(‘CACHE_MODEL_PATH‘,PHPCMS_PATH.‘caches‘.DIRECTORY_SEPARATOR.‘caches_model...

ThinkPHP验证码使用简明教程

一、首先需要在控制器中加入验证码方法admin/Lib/Action/LoginAction.class.php知识点：1、ob_clean函数用途2、import方法调用think默认类库3、Image类buildImageVerify方法使用代码如下：复制代码代码如下:Public function verify(){ ob_clean(); //ob_clean函数清空先前输出 import(‘ORG.Util.Image‘); //import调用的是message/ThinkPHP框架目录下的扩展包Extend/Library/ORG/Util/中的Image.class.php类文件 Image::buildI...

PHP生成验证码【代码】

<?php session_start(); getCode(4,50,20);function getCode($num,$w,$h) {$code = "";for ($i = 0; $i < $num; $i++) {$code .= rand(0, 9);}//4位验证码也可以用rand(1000,9999)直接生成//将生成的验证码写入session，备验证页面使用$_SESSION[‘phpcode‘] = $code;setcookie("mimi", md5($code), time()+1200);//创建图片，定义颜色值Header("Content-type: image/PNG");$im = imagecreate($w, $h);$black = imagecolorallocat...

php编译gd支持验证码登陆【图】

问题是脚本编译的php不支持gd，不能生成动态的验证码？最终的解决办法是：1.确定gd，jpeg，png，freetype包都已经安装（基于centos6.7 yum安装）[root@mcd nginx+php1.9]# rpm -qa | grep jpelibjpeg-turbo-1.2.1-3.el6_5.x86_64libjpeg-turbo-1.2.1-1.el6.x86_64openjpeg-libs-1.3-11.el6.x86_64libjpeg-turbo-devel-1.2.1-3.el6_5.x86_64[root@mcd nginx+php1.9]# rpm -qa | grep pnglibpng-1.2.49-2.el6_7.x86_64libpng-devel-1...

thinkphp验证码的实现【代码】【图】

两种验证码验证实现，一种直接在form表单提交按钮实现验证，一种使用ajax传递参数实现验证：1、直接在form表单提交按钮实现验证，在控制器VerifyController.class.php中写入如下代码：namespace Home\Controller; use Think\Controller; class VerifyController extends Controller {public function index() {$this->display();}public function checkLogin() {$verify=new \Think\Verify();$code=I(‘post.verify‘);//表单验证码...

PHP后端之验证码【代码】【图】

PHP后端之验证码前言：打算写一些实际开发中遇到的东西。我这个人记性不好，觉得记下来，以后就算想找，也能找得到。PHP，可能很长一段时间都不会使用了。所以还是留一些记录。另外还有一些服务器架设的总结，之后整理了，会发布出来。一，问题：相信大家都有以下的经历：1，上学的时候，猜解家里电脑的登陆密码。2，忘了行李箱密码，让后凄惨地一个个试。3，大学，一个个试学校内网的密码。等等。也许，你会觉得这样一个个试，...

PHP_制作验证码【代码】

PHP制作一个验证码，主要使用数组相关函数 1 <?php2header("content-type:text/html;charset=UTF-8");3//建立3个范围数组 4$shuzi = range(0,9);5$zimuda = range(‘A‘,‘Z‘);6$zimuxiao = range(‘a‘,‘z ‘);7 8//将这3个数组合并成新数组 9$arr=array_merge($shuzi,$zimuxiao,$zimuda); 1011//遍历新数组12foreach ($arras$key => $value) { 13//如果新数组里的元素包含下面的字，则将其删除（unset）；14if($value == ‘0‘...

PHP验证码类

通过PHP的GD库图像处理内容，设计一个验证码类Vcode。将该类声明在文件vcode.class.php中，并通过面向对象的特性将一些实现的细节封装在该类中。只要在创建对象时，为构造方法提供三个参数，包括创建验证码图片的宽度、高度及验证码字母个数，就可以成功创建一个验证码类的对象。该类的声明代码如下所示：?12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626...

ThinkPHP验证码【代码】

模块：Home；显示：Home /View/Main/prectice //Home模块->View视图->Main文件夹->prectice<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>验证码</title> <script src="../../../../../bootstrap/dist/js/jqu...

PHP-问题处理验证码无法显示出来【代码】【图】

1.问题　　今天重新安装了ubuntu,PHP,MySQL,Apache，到测试CMS项目时发生一个错误：　　验证码无法显示出来。 2.解决：　　2.1 使用 phpinfo检查：phpinfo();　在项目根目录创建一个test.php,并写上上边的代码，测试检查phpinfo.查找有没有gd项，也就是有没有开启gd库。如果找不到gd，说明还没有安装php-gd，就继续后面的安装步骤，否则是其他问题引起。　　2.2 安装gd库：sudo apt-get install php-gd　　2.3 重启apache服务s...

PHP验证码之数字运算验证码【代码】

<?php //如果对代码不理解请看我上一篇的详细解答。 //数字验证码：http://my.oschina.net/u/2391943/blog/485163 getValidate(100,30); function getValidate($w,$h){ $img = imagecreate($w,$h); $gray = imagecolorallocate($img,255,255,255); $black = imagecolorallocate($img,rand(0,200),rand(0,200),rand(0,200)); $red = imagecolorallocate($img, 255, 0, 0); $white = imagecolorallocate($img, 255, 255, 255); $gree...

thinkphp 检测验证码【代码】

/** * 检测验证码 * @param integer $id 验证码ID * @return boolean 检测结果 */function check_verify($code, $id = 1){ $verify = new \Think\Verify(); return $verify->check($code, $id);} 原文：http://www.cnblogs.com/ygw1010/p/6564427.html

首页 / PHP / 验证码破解和反破解的思路

验证码破解和反破解的思路

内容导读

内容图文

内容总结

内容备注

内容手机端

【验证码破解和反破解的思路】教程文章相关的互联网学习教程文章

验证码 - 相关标签

PHP - 技术教程分类

PHP - 最新教程

PHP - 最热教程