Skip to content

Setting up Xevil with GSA

Thanks guys for your help so far. My tools are already running. However I am not sure my Xevil setup is working 100%. 

Here is how I set it up:

I was looking at some Russian videos and they were setting up each different captcha service in SER one by one like so and then entering dummy data in the API key and password boxes: 

Is it enough just to enter Xevil as captcha breaker or is there more to it? And are there any other settings we should be aware of to make sure captchas get sent to the captcha breaker? Currently this is the only setting I could find:



  • SvenSven
    Well what does the TEST (balance, internal captcha, recaptcha...) give back as result ?
  • Here you go Sven. 



    recaptcha V2

    recaptcha V3

  • SvenSven
    hmm so it's not solving normal image captchas? Try again or a different image.
  • I didn't have an opportunity to provide an image. I selected internal and it gave me the error message. Do I need to do some preparation before selecting internal?
  • SvenSven
    No, that should work just fine. I had access to another xevil 5+ setup and it worked as expected. So either something is broken on that latest beta of xevil or some other local issues.
  • Was that set the same way as my settings above?
  • SvenSven
  • michaeldonmichaeldon sofia
    edited May 2021
    I found an old thread on blackhatworld with the same issue. Here it is:

    The final poster suggests this:

    >>Use antigate in Xevil
    >>Port press + host the hostfile must be configured
    >>In GSA go under Settings Captcha on add, and choose antigate old API with ip

    I tried this (added xevil antigate also to hosts) and when I try to test> test capcha > internal I get this message:

    I have pinged urls in my hosts file from the command window. It worked ok. Here is my hosts file:

    # Copyright (c) 1993-2009 Microsoft Corp.
    # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
    # This file contains the mappings of IP addresses to host names. Each
    # entry should be kept on an individual line. The IP address should
    # be placed in the first column followed by the corresponding host name.
    # The IP address and the host name should be separated by at least one
    # space.
    # Additionally, comments (such as these) may be inserted on individual
    # lines or following the machine name denoted by a '#' symbol.
    # For example:
    #          # source server
    #              # x client host
    # localhost name resolution is handled within DNS itself.
    #       localhost
    #	::1             localhost
    # ~~~ "XEvil.exe" block start ~~~
    # ~~~ "XEvil.exe" block end ~~~ 
  • SvenSven
    can you use xevil on an external ip and send me the data to access it in a private message? I will debug it from my PC and check what stuff is replied.
  • If you can tell me how to do it :)

    I am using xevil on my home PC because I wasn't able to click "I agree" on our VPS for GSA.
  • SvenSven
    Well instead of running it on run it on or your external IP. Then send me the external IP in private message.
  • Huuuh, I just solved the same problem - by changing local IP in GSA and in Xevil 5 to

Sign In or Register to comment.