navigating the grey · single worker → multi-vm

Submit the
data, not the code.

Seven target sites of escalating hostility — session gates, fingerprinting, OCR-only fields, hidden APIs, geo-walls, audio CAPTCHAs, behavioral surveillance, burner-email registration, and a fragile origin that buckles if you hammer it. Breach the defenses, extract the most complete intel, and our engine scores you live.

greynet@console
$ POST /api/submit/blackmarket
  scrapeToken: a91f…
  lots: [ 60 sealed ]

 completeness 96.4%
 stealth A
 rank #1

threat ladder

difficulty increases →
TARGET·01ENTRY

OmniCorp Careers

Dystopian megacorp job portal

  • Signup CAPTCHA + email-verify + signin wall
  • OCR salary & email images
  • Hidden JSON API
  • 600 listings · 6 regions
  • Geo-locked region (proxy)
  • Fragile origin — don't hammer
breach target
TARGET·02LOW

Abyssal Salvage

Deep-sea shipwreck registry

  • Sonar firewall: slow origin + backoff
  • Muddy sonar-log OCR (coords)
  • Hover-to-load nested manifests (AJAX)
  • Pagination + throttling → concurrency
breach target
TARGET·03ELEVATED

The Syndicate

Underground bounty registry

  • Behavioral mouse-movement gate
  • Scanned dossier PDFs (OCR)
  • Audio CAPTCHA — Whisper / STT
  • Voice-locked inner circle
breach target
TARGET·04HIGH

Eye in the Sky

Vegas high-roller ledger

  • Partner-hotel cookie trust chain
  • Fingerprint spoof (en-US / LA tz)
  • Floor-surveillance behavioral gate
  • Watermarked OCR slips
  • US-only geo · live-odds scaling
breach target
TARGET·05SEVERE

Specimen Registry

Classified clinical database

  • Multi-round vision-grid CAPTCHA (CLIP/SigLIP)
  • Fingerprint gate (curl_cffi)
  • Messy medical-chart OCR
  • Deeply nested hidden API
breach target
TARGET·06CRITICAL

//NULLBAZAAR

Dark-web compute auction

  • Burner-email registration
  • Geo-block (proxy out of US/EU)
  • Audio CAPTCHA wall (STT)
  • Fingerprint background-JSON (curl_cffi)
  • Expiring request token + receipt OCR
  • Nearly every technique at once
breach target
TARGET·07 · APEXAPEX

Statehouse Registry

Secretary of State business-entity search

The capstone — only finishes in time with concurrency and a fleet of VMs.

  • US-only WAF (proxy in)
  • Arithmetic OCR CAPTCHA (+ − × ÷)
  • ASP.NET __VIEWSTATE / __doPostBack pagination
  • Registered-agent email OCR
  • Honeypot form field
breach target