闲得无聊，趁着休息研究了一下极验4滑块验证码的安全性，是否有机器识别、自动化拖拽的可能性。首先看一下效果
如何识别验证码
1、下载图片
下载图片可以参考博客《采集极验4滑块验证码图片数据》
2、标记图片
3、标记滑动距离
实现代码
__author__ = "dengxinyan"import ioimport reimport timeimport jsonimport base64import randomimport requestsimport urllibfrom io import BytesIOfrom PIL import Imagefrom selenium import webdriverfrom selenium.webdriver.support.wait import WebDriverWaitfrom mon.action_chains import ActionChainsfrom mon.keys import Keysfrom selenium.webdriver import ChromeOptionsfrom selenium.webdriver import FirefoxOptions# PIL图片保存为base64编码def PIL_base64(img, coding='utf-8'):img_format = img.formatif img_format == None:img_format = 'JPEG'format_str = 'JPEG'if 'png' == img_format.lower():format_str = 'PNG'if 'gif' == img_format.lower():format_str = 'gif'if img.mode == "P":img = img.convert('RGB')if img.mode == "RGBA":format_str = 'PNG'img_format = 'PNG'output_buffer = BytesIO()# img.save(output_buffer, format=format_str)img.save(output_buffer, quality=100, format=format_str)byte_data = output_buffer.getvalue()base64_str = 'data:image/' + img_format.lower() + ';base64,' + base64.b64encode(byte_data).decode(coding)return base64_str# 验证码识别接口def shibie(img):url = "/openapi/verify_code_identify/"data = {# 用户的key"key":"nWrzPFUgFuqXQrCJJUM6",# 验证码类型"verify_idf_id":"23",# 样例图片"img_base64":PIL_base64(img),"img_byte": None,# 中文点选，空间语义类型验证码的文本描述（这里缺省为空字符串）"words":""}header = {"Content-Type": "application/json"}# 发送请求调用接口response = requests.post(url=url, json=data, headers=header)print(response.text)return response.json()def run(headless=False):# 保存已经下载过的图片，防止重复img_url_list = []# 配置参数option = FirefoxOptions()if headless:option.add_argument('--headless')else:option.add_argument('--window-size=100,100')driver = webdriver.Firefox(executable_path=r'webdriver\geckodriver.exe', options=option)# 伪装浏览器driver.execute_script("Object.defineProperty(navigator, 'webdriver', {get: () => false,});")navigator_webdriver = driver.execute_script("return navigator.webdriver")driver.execute_script("Object.defineProperty(navigator, 'plugins', {get: () => [1, 2, 3, 4, 5],});")plugins_length = driver.execute_script("return navigator.plugins.length")# 发送请求driver.get('/adaptive-captcha-demo')# 等待【滑动拼图验证】元素出现WebDriverWait(driver, 20).until(lambda x: x.find_element_by_xpath('//button[contains(text(),"一点即过验证")]'))# 创建 ActionChains 对象action = ActionChains(driver)# 向窗口发送按键事件，例如向下滚动 1000pxaction.send_keys([Keys.DOWN, Keys.DOWN, Keys.DOWN, Keys.DOWN, Keys.DOWN, Keys.DOWN], 1000)action.perform()for i in range(5):# 等待【滑动拼图验证】元素出现WebDriverWait(driver, 20).until(lambda x: x.find_element_by_xpath('//button[contains(text(),"一点即过验证")]'))# 找到【滑动拼图验证】元素tag1 = driver.find_element_by_xpath('//button[contains(text(),"一点即过验证")]/..')# 点击tag1.click()time.sleep(1)# 等待【滑动拼图验证】元素出现WebDriverWait(driver, 20).until(lambda x: x.find_element_by_xpath('//button[contains(text(),"滑动拼图验证")]'))# 找到【滑动拼图验证】元素tag1 = driver.find_element_by_xpath('//button[contains(text(),"滑动拼图验证")]/..')# 点击tag1.click()time.sleep(1)# 等待【点击按钮开始验证】元素出现WebDriverWait(driver, 20).until(lambda x: x.find_element_by_xpath('//div[@aria-label="点击按钮开始验证"]'))# 找到【点击按钮开始验证】元素tag2 = driver.find_element_by_xpath('//div[@aria-label="点击按钮开始验证"]')# 点击tag2.click()# 等待【验证码大图】元素出现WebDriverWait(driver, 20).until(lambda x: x.find_element_by_xpath('//div[contains(@class,"geetest_bg")]'))while 1:try:# 找到【注册】元素tag7 = driver.find_element_by_xpath('//div[contains(@class,"geetest_bg")]')# 获取 img 标签的 src 属性style = tag7.get_attribute('style')# 提取图片链接img_url = re.findall('url[(]"(.+?)"[)]', style)[0]breakexcept:continue# 请求获取图片response = requests.get(url=img_url)img = Image.open(BytesIO(response.content))# img = base64_PIL(base64_str)# 保存图片img.save('temp_img/{}.jpg'.format(int(time.time() * 1000)))img_url_list.append(img_url)# 验证码识别接口result = shibie(img)if result['code'] != 200:print(result)returnmove_x = int(result['data']['res_str'].replace('滑动', '').replace('px', ''))print('结果：', move_x)time.sleep(2)# 找到滑块 geetest_btn# 等待【找到滑块】元素出现WebDriverWait(driver, 20).until(lambda x: x.find_element_by_xpath('//div[contains(@class,"geetest_btn")]'))# 找到【找到滑块】元素tag8 = driver.find_elements_by_xpath('//div[contains(@class,"geetest_btn")]')[1]print(tag8)# 滑动滑块action = ActionChains(driver)action.click_and_hold(tag8).perform()# 计算实际滑动距离 = 像素距离 + 前面空白距离move_x = move_x - 15action.move_by_offset(move_x, 0)# n = (random.randint(3, 5))# move_x = move_x / n# for i in range(n):#action.move_by_offset(move_x, 0)#time.sleep(0.02)action.release().perform()# 判断是否滑动成功time.sleep(2)if __name__ == '__main__':run(headless=False)
极验4滑块验证码识别我也封装成了API接口，可以提供给大家免费调用：得塔云
总结
1、和极验3相比，极验4大图反爬能力变弱了。因为极验3图片链接很快就会失效。
2、和极验3相比，极验4图片的解析难度变小了。因为极验3的图片是打乱的，还需要拼图。
3、极验4滑动过程也没有验证滑动轨迹
