https://github.com/paulhobbel/cf_research

Research into the new CloudFlare anti-bot browser challenge.
https://github.com/paulhobbel/cf_research

Last synced: 17 days ago
JSON representation

Research into the new CloudFlare anti-bot browser challenge.

• Host: GitHub
• URL: https://github.com/paulhobbel/cf_research
• Owner: paulhobbel
• Created: 2020-11-06T22:47:22.000Z (about 4 years ago)
• Default Branch: main
• Last Pushed: 2020-11-09T00:02:12.000Z (about 4 years ago)
• Last Synced: 2024-04-23T13:36:05.416Z (9 months ago)
• Language: JavaScript
• Size: 53.7 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Cloudflare AntiBot Browser Challenge

This repository contains research about the new Cloudflares anti-bot javascript challenge.

This repository is for educational purposes only!

## Javascript Challenge

Bellow is a list of steps required to solve the js challenge:

1. Send a `GET` request to `cdn-cgi/challenge-platform/orchestrate/jsch/v1`, which replies with a obfuscated javascript file to generate the challenge id and make the next request.

2. Send a `POST` request to `cdn-cgi/challenge-platform/generate/ov1/{solved-challenge-id}/{cloudflare-ray-id}/cf_chl_1 cookie-here`. This request should contain the following cookies:

    - `__cfuid`: Cloudflare request id

    - `cf_chl_1`: Cloudflare challenge 1 id

3. Send a `POST` request like the second request, but with the `cf_chl_rc_ni` cookie.

4. Final request is also a `POST` request to `?__cf_chl_jschl_tk__={generated-token}`, unless the follow up is a captcha challenge.

### Generate Challenge ID

In step 1 a javascript file is aquired, this file can be used to generate the challenge id.

...describe challenge id generation...

## Captcha Challenge

I'm yet to find out how to solve this challenge.