Cloudflare captcha solver

Cloudflare Turnstile

Cloudflare Turnstile - is a captha made by Cloudflare

There are two cases for Turnstile:

1 - standalone captcha widget placed on a page of a website, protecting a form from automated submission. For this case just need to extract the sitekey and send it to our API with full page URL. Then just place the token into cf-turnstile-response and g-recaptcha-response fields and submit the form. Also, there can be a callback defined in turnstile.render call.

2 - captcha on Turnstile Challenge page on websites proxied proxied through Cloudflare. In this case you MUST extract the values of cData, chlPageData and action parameters and use the User-Agent value returned from our API. See more info on this case below.

Standalone Turnstile captcha

Request example:

{
              "method": "turnstile",
              "key": "YOUR_API_KEY",
              "sitekey": "0x4AAAAAAAVrOwQWPlm3Bnr5",
              "pageurl": "https://api.solvecaptcha.com/demo/cloudflare-turnstile",
              "json": 1
              }

Response example:

{
              "status": 1,
              "request": "74327409378"
              }

Use the returned ID to request the result from res.php endpoint of our API

Turnstile captcha on Cloudflare Challenge pages

If you need to bypass the Turnstile on Cloudflare Challenge pages you also MUST provide the following additional parameters:

• action
• data
• pagedata

And also you MUST set the User-Agent of your browser or HTTP client to the value returned from our API together with the token.

For cases when Turnstile is used standalone on a website, it is not required.

How to extract the required parameters

To extract the parameters you can redefine the turnstile.rended method to intercept the parameters passed when the method is called. For example, you can inject the following JavaScript code to the page. The code should be executed before the Turnstile widget is loaded.

const i = setInterval(()=>{
              if (window.turnstile) {
              clearInterval(i)
              window.turnstile.render = (a,b) => {
              let p = {
              method: "turnstile",
              key: "YOUR_API_KEY",
              sitekey: b.sitekey,
              pageurl: window.location.href,
              data: b.cData,
              pagedata: b.chlPageData,
              action: b.action,
              userAgent: navigator.userAgent,
              json: 1
              }
              console.log(JSON.stringify(p))
              window.tsCallback = b.callback
              return 'foo'
              }
              }
              },50)

Request example:

{
              "key": "YOUR_API_KEY",
              "method": "turnstile",
              "sitekey": "0x0AAAAAAADnPIDROzbs0Aaj",
              "data": "7fab0000b0e0ff00",
              "pagedata": "3gAFo2...0ME1UVT0=",
              "pageurl": "https://api.solvecaptcha.com/",
              "action": "managed",
              "json": 1
              }

Response example:

{
              "status": 1,
              "request": "74327409378"
              }

Use the returned id to request the result from res.php endpoint of our API

`

https://api.solvecaptcha.com/res.php?key=1abc234de56fab7c89012d34e56fa7b8&action=get&id=74327409378&json=1

`

Result example:

{
              "status": 1,
              "request": "0.4uMMZZdSfsVM8...610cd090",
              "useragent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
              }

List of GET/POST request parameters for https://api.solvecaptcha.com/in.php

Parameter	Type	Required	Description
key	String	Yes	your API key
method	String	Yes	turnstile - defines that you're sending Cloudflare Turnstile
sitekey	String	Yes	Value of sitekey parameter you found on page
pageurl	String	Yes	Full URL of the page where you see the captcha
action	String	No*	Value of optional action parameter you found on page, can be defined in data-action attribute or passed to turnstile.render call
data	String	No*	The value of cData passed to turnstile.render call. Also can be defined in data-cdata attribute
pagedata	String	No*	The value of chlPageData passed to turnstile.render call
useragent	String	Yes	User-Agent of your browser. Use only modern browsers. We recommend to use versions released in the last 6 months
header_acao	Integer Default: 0	No	0 - disabled 1 - enabled. If enabled in.php will include Access-Control-Allow-Origin:* header in the response. Used for cross-domain AJAX requests in web applications. Also supported by res.php.
pingback	String	No	URL for pingback (callback) response that will be sent when captcha is solved. URL should be registered on the server. More info here.
json	Integer Default: 0	No	0 - server will send the response as plain text 1 - tells the server to send the response as JSON
soft_id	Integer	No	ID of software developer. Developers who integrated their software with SolveCaptcha get reward: 10% of spendings of their software users.
proxy	String	No	Format: login:[email protected]:3128 You can find more info about proxies here.
proxytype	String	No	Type of your proxy: HTTP, HTTPS, SOCKS4, SOCKS5.

* - parameters required to bypass Turnstile on Cloudflare Challenge pages

List of GET request parameters for https://api.solvecaptcha.com/res.php

GET parameter	Type	Required	Description
key	String	Yes	your API key
action	String	Yes	get - get the asnwer for your captcha
id	Integer	Yes	ID of captcha returned by in.php.
json	Integer Default: 0	Yes	Always set to 1 for turnstile to get the response as JSON containing the User-Agent value