Cloudflare Turnstile

Token-based method to bypass Cloudflare Turnstile. Both the standalone captcha and challenge mode are supported.

There are two different cases that require different approach:

• Standalone Captcha - the captcha widget is placed on a webiste page, see our demo
• Cloudflare Challenge page - the captcha is shown on Cloudflare Challenge page

Standalone Captcha

To bypass a standalone captcha you just need to find the sitekey, get a token from our API and then pass it to your target as a value of input element with name cf-turnstile-response or g-recaptcha-response for reCAPTCHA compatibility mode. Also the token can be processed with a callback function passed to turnstile.render call.

Cloudflare Challenge page

This is much more complex case. You should intercept the turnstile.render call and grab the following values:

• cData
• chlPageData
• action

Also you will need to intercept the callback definition and use the userAgent returned from our API.

To intercept the required parameters you can inject the following JavaScript on page before the Turnstile widget is loaded.

const i = setInterval(()=>{
if (window.turnstile) {
    clearInterval(i)
    window.turnstile.render = (a,b) => {
    let p = {
        type: "TurnstileTaskProxyless",
        websiteKey: b.sitekey,
        websiteURL: window.location.href,
        data: b.cData,
        pagedata: b.chlPageData,
        action: b.action,
        userAgent: navigator.userAgent
    }
    console.log(JSON.stringify(p))
    window.tsCallback = b.callback
    return 'foo'
    }
}
},10)  

An another approach is to intercept the request to api.js script and replace it with your own script that returns the parameters and makes the callback acessible globally.

Finally when you received the solution:

• execute the callback passing the token as it's argument

Task types

• TurnstileTaskProxyless - we use our own pool of proxies
• TurnstileTask - we use your proxies

TurnstileTaskProxyless task type specification

TurnstileTask task type specification

TurnstileTask extends TurnstileTaskProxyless adding a set of proxy-related parameters listed below

Request examples

Method: createTask
API endpoint: https://api.2captcha.com/createTask

Standalone Captcha

TurnstileTaskProxyless request example

{
    "clientKey":"YOUR_API_KEY",
    "task": {
        "type":"TurnstileTaskProxyless",
        "websiteURL":"https://2captcha.com/demo/cloudflare-turnstile",
        "websiteKey":"3x00000000000000000000FF"
    }
}

TurnstileTask request example

{
    "clientKey":"YOUR_API_KEY",
    "task": {
        "type":"TurnstileTask",
        "websiteURL":"https://2captcha.com/demo/cloudflare-turnstile",
        "websiteKey":"3x00000000000000000000FF",
        "proxyType":"http",
        "proxyAddress":"1.2.3.4",
        "proxyPort":"8080",
        "proxyLogin":"user23",
        "proxyPassword":"p4$w0rd"
    }
}

Cloudflare Challenge Pages

TurnstileTaskProxyless request example

{
    "clientKey":"YOUR_API_KEY",
    "task": {
        "type":"TurnstileTaskProxyless",
        "websiteURL":"https://2captcha.com/demo/cloudflare-turnstile",
        "websiteKey":"3x00000000000000000000FF",
        "action": "managed",
        "data": "80001aa1affffc21",
        "pagedata": "3gAFo2l...55NDFPRFE9",
        "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36",
    }
}

TurnstileTask request example

{
    "clientKey":"YOUR_API_KEY",
    "task": {
        "type":"TurnstileTask",
        "websiteURL":"https://2captcha.com/demo/cloudflare-turnstile",
        "websiteKey":"3x00000000000000000000FF",
        "action": "managed",
        "data": "80001aa1affffc21",
        "pagedata": "3gAFo2l...55NDFPRFE9",     
        "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36",
        "proxyType":"http",
        "proxyAddress":"1.2.3.4",
        "proxyPort":"8080",
        "proxyLogin":"user23",
        "proxyPassword":"p4$w0rd"
    }
}

Response example

Method: getTaskResult
API endpoint: https://api.2captcha.com/getTaskResult

{
    "errorId": 0,
    "status": "ready",
    "solution": {
        "token": "0.zrSnRHO7h0HwSjSCU8oyzbjEtD8p.d62306d4ee00c77dda697f959ebbd7bd97",
        "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36",
    },
    "cost": "0.00145",
    "ip": "1.2.3.4",
    "createTime": 1692863536,
    "endTime": 1692863556,
    "solveCount": 1
}

Code examples

// https://github.com/2captcha/2captcha-php

require(__DIR__ . '/../src/autoloader.php');

$solver = new \TwoCaptcha\TwoCaptcha('YOUR_API_KEY');

try {
    $result = $solver->turnstile([
        'sitekey' => '3x00000000000000000000FF',
        'url'     => 'https://2captcha.com/demo/cloudflare-turnstile',
    ]);
} catch (\Exception $e) {
    die($e->getMessage());
}

# https://github.com/2captcha/2captcha-python

import sys
import os

sys.path.append(os.path.dirname(os.path.dirname(os.path.realpath(__file__))))

from twocaptcha import TwoCaptcha

api_key = os.getenv('APIKEY_2CAPTCHA', 'YOUR_API_KEY')

solver = TwoCaptcha(api_key)

try:
    result = solver.turnstile(
        sitekey='3x00000000000000000000FF',
        url='https://2captcha.com/demo/cloudflare-turnstile',
    )

except Exception as e:
    sys.exit(e)

else:
    sys.exit('solved: ' + str(result))

require 'api_2captcha'

client =  Api2Captcha.new("YOUR_API_KEY")

result = client.turnstile({
sitekey: '3x00000000000000000000FF',
pageurl: 'https://2captcha.com/demo/cloudflare-turnstile'
})

Useful links

• Turnstile demo page
• How to bypass Turnstile
• Video how to bypass Turnstile
• Turnstile on Cloudflare Challenge pages