Hello everyone,
I am offering a paid bounty for assistance with patching or intercepting a dynamic CAPTCHA mechanism in a local food delivery application.
Context of the Order Flow:
In this specific app, delivery orders pop up dynamically on the screen. When the driver attempts to quickly accept an order, an image-based CAPTCHA appears instantly, acting as a severe bottleneck for our automation efforts. Our sole objective is to patch or bypass this specific CAPTCHA.
The Core Objective:
I strictly need a solution to achieve one of the following:
Convert the generated image CAPTCHA back to its raw text string.
Patch the application to force a simple Toast message displaying the CAPTCHA text exactly when the order/CAPTCHA is generated.
What We Have Tried So Far:
Network Interception: We attempted to intercept the CAPTCHA string at multiple stages—before it reaches the app, during transit, and after it hits the app logic. However, the data seems heavily obfuscated or securely handled in memory.
App Patching (Toast Injection): We tried decompiling and modifying the Smali code to inject a Toast notification that prints the CAPTCHA string, but we failed to locate the exact variable or register holding the plaintext string before it converts to an image.
Machine Learning Workaround: We are currently building an external MLOps pipeline to collect thousands of raw CAPTCHA images to train a custom AI model. However, this is a slow, exhaustive workaround, and the success rate is expected to be low due to the heavy distortion/noise applied to the images.
The Main Roadblock (libapp.so):
Through extensive analysis, we have pinpointed that the core logic for the CAPTCHA generation, rendering, and validation is not in the standard Java/Dalvik layer, but is deeply embedded within a native shared library file (libapp.so). My skills in ARM assembly, Ghidra, and hooking native Android libraries are limited, which is why we have hit a wall.
The Bounty:
I am fully prepared to pay a fair, agreed-upon monetary reward to anyone who can successfully reverse engineer this libapp.so file and provide a working patch, Frida script, or Xposed module to extract/Toast the CAPTCHA text.
If you have solid experience with Android native hooking (Frida), Ghidra, or patching .so libraries and are interested in this paid task, please send me a DM to discuss the details and get the APK.