Please do not open a public issue for security problems.

Use GitHub's private vulnerability reporting instead:

• https://github.com/vsmutok/FuckCaptcha/security/advisories/new

Include the affected page or file, a short description, and reproduction steps. You can expect an initial response within a few days.

This repository is educational documentation plus a static website. It does not ship or operate a CAPTCHA-solving service. Typical reports include:

• content that enables illegal or abusive behaviour;
• malicious links or misleading paid-service claims;
• XSS or injection in the static site;
• leaked secrets.

Out of scope: the effectiveness of third-party tools or services listed in the guide, and disagreements about the ethics of CAPTCHA research. See the disclaimer in the README and on the website.