hCaptcha Analysis

Basic Info

This script was introduced early June 2022 with version 1.10.7/b78be28

You can fetch the script at this URL: https://newassets.hcaptcha.com/i/{VERSION_HASH?}/e but it's encrypted, after being fetched it's decrypted inside the WebAssembly and executed.

It collects various device fingerprinting data, most of them are listed below.

Current version 28-10-2022: 1.18.0/bc030dc

Parameters explanation: 1.18.0 (Up to date)

Note:

• They seem to be running extra checks depending on the "security" parameter enabled eg. when solving AND/OR failing too many captchas in a row, some extra automation checks (worker, proxy spoofing,automation extensions...) are ran

Parameters

101

• Result: Array
• Value: [window.screen.width,window.screen.height]
• Hashed: false

  102

• Result: bool
• Value: Screen dimensions check more info
• Hashed: false

  103

• Result: Array
• Value: s as window.screen [s.width,s.height,s.availWidth,s.availHeight,s.colorDepth,s.pixelDepth,navigator.maxTouchPoints,devicePixelRatio]
• Hashed: false

  104

• Result: Bool
• Value: s as window.screen !(s.width - s.availWidth || s.height - s.availHeight);
• Hashed: false

  201

• Result: Array
• Value: Looks like some sort of CSS Fingerprinting (Firefox hash is the not the same as the Chrome one)
• Hashed: true

  202

• Result: Array
• Value: Don't really know how to explain this one (see script for more info)
• Hashed: false

  203

• Result: Bool
• Value: Some sort of CSS fingerprinting see; return false on most browsers
• Hashed: false

  204

• Result: String
• Value: Supported emojis (fingerprinting)
• Hashed: false

  205

• Result: Bool
• Value: Some sort of CSS fingerprinting see; return false on most browsers
• Hashed: false

  301

• Result: Array
• Value: CSS Properties list (hash is different accross browsers but shared between devices)
• Hashed: true

  302

• Result: Object
• Value: Looks like some sort of CSS Fingerprinting (hash is different accross browsers but shared between devices)

  303

• Result: Array
• Value: Fonts but weird // TODO
• Hashed: false

  304

• Result: Number
• Value: length of CSS properties
• Hashed: false

  401

• Result: Array
• Value: Object.getOwnPropertyNames(window)
• Hashed: true

  402

• Result: Number
• Value: Object.getOwnPropertyNames(window).length
• Hashed: false

  501

• Result: Array
• Value: Supported media sources
• Hashed: true

  601

• Result: String
• Value: User-Agent
• Hashed: false

  602

• Result: Array
• Value: n as window.navigator [n.language,n.languages,n.platform,n.oscpu]
• Hashed: false

  603

• Result: Array
• Value: [deviceMemory,hardwareConcurrency]
• Hashed: false

  701

• Result: Bool
• Value: Firefox only. Purpose: ???
• Hashed: false

  702

• Result: Array
• Value: navigator.userAgentData.getHighEntropyValues(["platform","platformVersion","model","bitness","architecture","uaFullVersion"])
• Hashed: false

  703

• Result: Array
• Value: navigator.userAgentData.getHighEntropyValues(["platform","platformVersion","model","bitness","architecture"])
• Hashed: false

  801

• Result: Array
• Value: matchMedia() CSS Properties info
• Hashed: false

  901

• Result: Array
• Value: Some voices fingerprinting data
• Hashed: true

  902

• Result: Array
• Value: Enabled voices name
• Hashed: false

  903

• Result: String
• Value: First enabled voice locale eg. "en-US"
• Hashed: false

  1001

• Result: Array
• Value: Audio Fingerprinting
• Hashed: true

  1002

• Result: Bool
• Value: Detect lie about your audio fingerprint (i guess?)
• Hashed: false

  1101

• Result: String
• Value: Canvas fingerprinting
• Hashed: true

  1102

• Result: Bool
• Value: TBD
• Hashed: false

  1201

• Result: Array
• Value: Sort of CSS fingerprinting (not used?)
• Hashed: true

  1301

• Result: Array
• Value: Fonts installed on the system
• Hashed: false

  1401

• Result: String
• Value: TimeZone
• Hashed: false

  1402

• Result: Array
• Value: [Timezone,See script,new Date("1/1/1970").getTimezoneOffset(),See script,See script]
• Hashed: false

  1501

• Result: Array
• Value: navigator.mediaDevices.enumerateDevices()
• Hashed: true

  1601

• Result: Bool
• Value: TBD (related to bluetooth?)
• Hashed: false

  1701

• Result: Array
• Value: WebRTC fingerprinting
• Hashed: true

  1801

• Result: Array
• Value: WebRTC fingerprinting
• Hashed: true

  1901

• Result: Array
• Value: Math Fingerprinting, Hash is different across browser types
• Hashed: true

  1902

• Result: Number
• Value: Some error stack inspection function more here
• Hashed: false

  2001

• Result: Array
• Value: Navigator Permissions
• Hashed: true

  2002

• Result: Array
• Value: Notification Permissions
• Hashed: false

  2201

• Result: Array
• Value: Codecs testing (some sort of audio hash?)
• Hashed: true

  2301

• Result: String
• Value: Worker Check: Worker User-Agent
• Hashed: false

  2302

• Result: Bool
• Value: Worker Check: Is worker User-Agent same as Browser
• Hashed: false

  2303

• Result: Array
• Value: Worker Check: Languages and Locale from Worker + language from browser
• Hashed: false

  2304

• Result: Array
• Value: Worker Check: Some errors from the Worker
• Hashed: false

  2401

• Result: Array
• Value: WebGL properties hash
• Hashed: true

  2402

• Result: Array
• Value: WebGL Vendor & Renderer
• Hashed: false

  2403

• Result: Array
• Value: WebGL2 Vendor & Renderer
• Hashed: false

  2501

• Result: Array
• Value: WebGL Fingerprinting
• Hashed: true

  2601

• Result: Array
• Value: Worker Check: Checks for known automation extensions
• Hashed: false

  2701

• Result: Array
• Value: [lengthOfSomeFunctions,Object.getOwnPropertyNames(window.chrome || {}),check if it's a process ?]
• Hashed: false

  2702

• Result: Array
• Value: Navigator properties check (brand,mobile,platform)
• Hashed: false

  2703

• Result: String
• Value: if ran in electron get the name of the App
• Hashed: false

  2801

• Result: Array
• Value: Audio Fingerprinting
• Hashed: true

  2802

• Result: Number
• Value: Total length of the properties
• Hashed: false

  2803

• Result: Array
• Value: Checks some properties related to the navigator and Window
• Hashed: false

  2901

• Result: Array
• Value: Checks some properties related to the navigator and Window
• Hashed: false

  2902

• Result: Array
• Value: TBD
• Hashed: false

  2903

• Result: Bool
• Value: !!navigator.webdriver
• Hashed: false

  3001

• Result: Array
• Value: Checks integrity of all Window functions
• Hashed: true

  3002

• Result: Number
• Value: Length of all window function (not sure lol)
• Hashed: false

  3101

• Result: Array
• Value: TBD (not actived yet)
• Hashed: false

  3201

• Result: Number
• Value: Math.max(Math.floor(n / 1073741824)
• Hashed: false

  3202

• Result: Number
• Value: e.sent().quota ?? TBD
• Hashed: false