How to bypass Hunt captcha

Introduction

Hunt captcha is a token-based protection that checks the uniqueness of the browser fingerprint and user session. Automation requires a two-step approach. First, you need to get a unique X-HD identifier, then use it to solve the captcha.

The 2Captcha service provides an API to bypass Hunt captcha via the HuntTask task type. The solution returns a token that you must pass to the target site to pass the check.

This article describes the full process, from creating a task to working with cookies and handling responses.

Overview

Hunt Captcha is a protection system based on tokens and browser fingerprints. Unlike classic image captchas, Hunt checks session uniqueness and behavioral patterns.

Key features:

• Two-step process. First get the X-HD unique fingerprint, then solve the captcha.
• IP binding. X-HD is tied to the IP address, so all requests must go through the same proxy.
• Cookie handling. Crucial for maintaining the session.
• Proxy requirement. The HuntTask task strictly requires a proxy.

The main problem in automation is synchronizing all parameters like IP, User-Agent, and cookies between requests. If anything changes, the security system rejects the solution.

Environment Setup

Before you start, make sure you have:

• API key from your 2Captcha dashboard.
• Working proxy (HTTP, SOCKS4, or SOCKS5) with a static IP.
• Target page URL with the Hunt captcha.
• Link to api.js. This is the captcha library file, usually visible in the page source code.
• Tool for HTTP requests (curl, Postman, Python requests, etc.).

The proxy must be static. Rotating proxies will not work because X-HD is tied to a specific IP. If you do not have your own proxy, you can use proxies from 2Captcha. They are specially selected for different captcha types and perform well on sites with complex protection. You can check the available options on the Proxy page.

Page Analysis

Before creating a task, you need to extract three key elements from the page:

1. websiteURL. The full URL of the page with the captcha.
2. apiGetLib. A link to the Hunt library JavaScript file (usually looks like https://example.com/hd-api/external/apps/app-id/api.js).
3. meta.token. The value the site returns after the first request with X-HD.

To extract apiGetLib, open the page source code (Ctrl+U) and find the <script> tag with a src attribute containing api.js or hd-api.

To get meta.token, you first need to make an initial request to the API without the data parameter, get the X-HD, send it to the site, and extract the token from the response.

Implementation

Step 1. Create task without data (get X-HD)

Send a POST request to create a task without the data parameter:

Endpoint: https://api.2captcha.com/createTask

Method: POST

Content-Type: application/json

Request example:

{
  "clientKey": "YOUR_API_KEY",
  "task": {
    "type": "HuntTask",
    "websiteURL": "https://example.com/page-with-hunt",
    "apiGetLib": "https://example.com/hd-api/external/apps/app-id/api.js",
    "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36",
    "proxyType": "http",
    "proxyAddress": "1.2.3.4",
    "proxyPort": 8080,
    "proxyLogin": "login",
    "proxyPassword": "password"
  }
}

Response example:

{
  "errorId": 0,
  "taskId": "123456789"
}

Step 2. Get result (X-HD)

Send a POST request to get the task result:

Endpoint: https://api.2captcha.com/getTaskResult

Method: POST

Content-Type: application/json

Request example:

{
  "clientKey": "YOUR_API_KEY",
  "taskId": "123456789"
}

Response example:

{
  "errorId": 0,
  "status": "ready",
  "solution": {
    "X-HD": "abc123def456..."
  },
  "cost": "0.003",
  "ip": "1.2.3.4",
  "createTime": 1692863536,
  "endTime": 1692863556,
  "solveCount": 1
}

Extract the solution.X-HD value from the response.

Step 3. Send X-HD to the site

Send a GET request to the target site with the X-HD header:

GET https://example.com/page-with-hunt
Headers:
  X-HD: abc123def456...
  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
  Cookie: platform_type=desktop; SESSION=12a3aea8cdcfdbb9e7df8ee99b526a84; ...

The site will return a response with meta.token. Extract this value from the JSON response or HTML.

Step 4. Create task with data (solve captcha)

Send a POST request to create a task with the data parameter equal to meta.token:

Endpoint: https://api.2captcha.com/createTask

Method: POST

Content-Type: application/json

Request example:

{
  "clientKey": "YOUR_API_KEY",
  "task": {
    "type": "HuntTask",
    "websiteURL": "https://example.com/page-with-hunt",
    "apiGetLib": "https://example.com/hd-api/external/apps/app-id/api.js",
    "data": "kufyHK/s/j...wIW",
    "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36",
    "proxyType": "http",
    "proxyAddress": "1.2.3.4",
    "proxyPort": 8080,
    "proxyLogin": "login",
    "proxyPassword": "password"
  }
}

Step 5. Get the solution

Send a POST request to get the result:

Endpoint: https://api.2captcha.com/getTaskResult

Method: POST

Content-Type: application/json

Request example:

{
  "clientKey": "YOUR_API_KEY",
  "taskId": "123456790"
}

Response example:

{
  "errorId": 0,
  "status": "ready",
  "solution": {
    "token": "6IyDCCpDd.../z/kLNSpjewI="
  },
  "cost": "0.003",
  "ip": "1.2.3.4",
  "createTime": 1692863536,
  "endTime": 1692863556,
  "solveCount": 1
}

Extract solution.token and pass it to the target site to complete the verification.

Parameter Explanations

HuntTask parameters

Response structure

Working with Cookies

Cookies are critical for Hunt captcha. The site tracks the session through cookies. If they are not passed or change, the verification fails.

Example cookie string

platform_type=desktop; typeBetNames=full; _glhf=1234567890; coefview=0; visit=1-123abc012345d1be726746568edc62d9; fast_coupon=true; v3fr=1; lng=en; flaglng=en; SESSION=12a3aea8cdcfdbb9e7df8ee99b526a84; auid=ab0dW2mqlz1Tjo2AAwplAg==; ggru=195; che_g=12abcede-691f-c7b2-d1e8-8488bc557d98

Basic rules for working with cookies

1. Get initial cookies. Send a GET request to the target page and extract cookies from the Set-Cookie header.
2. Save all values. You will need cookies for all subsequent requests.
3. Pass cookies in every request. Add them to the Cookie header when contacting the API and the site.
4. Use one IP. All requests must go through one proxy.
5. Use one User-Agent. Do not change the User-Agent between requests.
6. Update cookies if necessary. Some cookies are generated by JavaScript on the client side.

Example headers with cookies

GET https://example.com/page-with-hunt
Headers:
  X-HD: abc123def456...
  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
  Cookie: platform_type=desktop; SESSION=12a3aea8cdcfdbb9e7df8ee99b526a84; visit=1-123abc012345d1be726746568edc62d9

Common Errors

Additional Resources

• Hunt Captcha API Documentation
• Proxies for captchas
• API v2 Overview
• Contact support

Pre-launch Checklist

• Received API key from 2Captcha dashboard
• Configured static proxy
• Extracted websiteURL and apiGetLib from page source code
• Implemented two-step process: get X-HD, send to site, get meta.token, solve captcha
• Configured cookie handling: get, save, pass in headers
• All requests use one IP (proxy) and one User-Agent
• Implemented error and timeout handling
• Tested solution on target site
• Configured logging for debugging

Conclusion

Hunt captcha requires careful work with the session and browser fingerprints. The two-step process via the 2Captcha API allows you to automate solving, but consistency is critical. You must use one proxy, one User-Agent, and correct cookies.

Use the HuntTask task type to solve the captcha via a proxy. The first request without data returns the X-HD. The second request with data = meta.token returns the solution token.

Do not forget about cookies. Without them, the site will reject the solution. Save cookies from the first response and pass them in all subsequent requests.

Proxy quality largely determines success. If your own proxies show unstable results, it makes sense to try our proxies.

Detailed documentation is available on the Hunt Captcha API page.