用混合框架破解暗网验证码,准确率超90%
Breaking Darknet CAPTCHAs with general purpose LLM

- 让大模型负责推理,专用算法处理几何计算
- 三种暗网验证码解法准确率均超90%
- 适合研究大模型与传统视觉结合的应用
本研究评估了自动化方法在暗网环境中常见CAPTCHA挑战上的有效性。这些CAPTCHA通常不依赖JavaScript,具有与主流系统不同的特征。研究涵盖三种典型挑战类型:开圆定位、基于旋转的对齐和物体选择CAPTCHA。实验发现,当前多模态大模型(MLLM)虽能识别视觉结构,但在精确空间定位和几何变换上表现不足。该缺陷可通过任务重构或引入专用图像处理工具缓解。为此,我们提出一种混合框架:多模态大模型作为高层推理与调度层,通过模型上下文协议(MCP)将几何计算委托给确定性算法。该系统在所有测试的CAPTCHA类型中成功率均超过90%,表明结合多模态大模型与经典计算机视觉的优势,可实现比单一方法更精准高效的求解。
原文摘要 · Abstract (English)
Our work evaluates the effectiveness of automated methods for solving CAPTCHA challenges commonly encountered in darknet environments. These CAPTCHAs are typically designed to operate without JavaScript, resulting in distinct characteristics compared to mainstream CAPTCHA systems. Our study considers three representative challenge types: open-circle localization, rotation-based alignment, and object-selection CAPTCHAs. The experiments reveal a systematic limitation of contemporary MLLMs: while they are generally capable of identifying relevant visual structures, they frequently struggle with precise spatial localization and geometric transformations. These deficiencies can be mitigated either through task reformulation or by augmenting the models with specialized image processing tools. These deficiencies can be mitigated by task reformulation or by equipping the model with specialized image-processing tools. We therefore propose a hybrid framework in which an MLLM serves as a high-level reasoning and orchestration layer while delegating geometric computations to deterministic algorithms via the Model Context Protocol (MCP). The resulting system achieves success rates above 90% across all evaluated CAPTCHA types and demonstrates that combining the complementary strengths of MLLMs and classical computer vision yields a more accurate and efficient solver than either approach alone.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。