[IMPORTANT] This is a non-functional, educational tool to demonstrate the vulnerability of image-based CAPTCHAs. It is intentionally designed to FAIL the CAPTCHA and DOES NOT provide any gameplay advantage. Use for learning purposes only.
This project is a de-weaponized, educational tool designed to demonstrate a common web security vulnerability: the bypass of simple image-based CAPTCHAs using Optical Character Recognition (OCR). The bot is fully featured for racing on TypeRacer but is intentionally designed to fail the anti-cheat "Typing Challenge."
The goal is to provide a safe, hands-on learning experience for developers, students like me, without providing a tool that can be used for actual cheating.
Many systems rely on showing users an image of distorted text to prove they are human. The assumption is that computers cannot "read" text inside an image.
This assumption is no longer safe. Modern, open-source OCR libraries like Tesseract.js can be integrated directly into browser scripts. With minimal image pre-processing, these libraries can achieve high accuracy in converting image text back into character strings, allowing a bot to programmatically solve the challenge.
This project demonstrates this entire process, but stops short of submitting the correct answer, ensuring it remains an educational tool.
This video shows the bot in action: it performs a race at a configured speed, encounters the "Typing Challenge," and then visibly fails the check in a controlled manner.
This project is for learning and responsible disclosure. Using automated tools to gain an unfair advantage on TypeRacer is strictly against their Terms of Service.
From the TypeRacer Terms of Service (Section 2. Cheating):
Dishonest competition between players will not be tolerated. You shall not:
- cheat during gameplay or carry out any action to artificially enhance your typing speed or other statistics
- use any third-party software to modify TypeRacer to change gameplay, including, but not limited to cheats and/or hacks;
This project and its author do not condone cheating. By using this code, you agree that you will not modify it to create a functional cheat and will only use it for educational purposes on your own accounts. Any consequences of violating TypeRacer's ToS are your own responsibility.
You need a userscript manager browser extension.
This project is licensed under the MIT License. See the LICENSE file for details.
