MTCaptcha 验证码识别工具：绕过 MTCaptcha，获取已验证的 token

import time
import requests

API = "http://127.0.0.1:8080"
KEY = "YOUR_API_KEY"

# The sitekey comes from the page's mtcaptchaConfig object.
job = requests.post(API + "/in.php", data={
    "key": KEY,
    "method": "mt_captcha",
    "sitekey": "MTPublic-KzqLY1cKH",
    "pageurl": "https://www.example.com/login",
    "json": 1,
}).json()

while True:
    time.sleep(3)
    res = requests.get(API + "/res.php", params={
        "key": KEY, "action": "get", "id": job["request"], "json": 1,
    }).json()
    if res["request"] != "CAPCHA_NOT_READY":
        break
if res["status"] != 1:
    raise RuntimeError(res["request"])

# The token is single-use and short-lived: submit the form right away.
requests.post("https://www.example.com/login", data={
    "username": "alice",
    "password": "YOUR_PASSWORD",
    "mtcaptcha-verifiedtoken": res["request"],
})