logoalt Hacker News

Cloudflare Turnstile solver library (no headless browser required)

116 points • by costco • last Wednesday at 5:29 PM • 31 comments • view on HN

Comments

costco • today at 12:23 AM

Author here. I submitted this a few days ago but seems like it was added to the second chance pool so now it’s on the front page. Anyways, I have received a report from a user that this solver did not work for them with European proxies but did with US proxies… so they may be serving different versions for different regions. I will fix that soon. I’m not at my computer right now but it was working when I tested it a few hours ago (Cloudflare constantly changes things).

➕ show 2 replies
paaloeye • today at 12:48 AM

For better or worse, it's like `yt-dlp` — constant race against CF, so it's not reliable. It's probably for better.

➕ show 1 reply
manofmanysmiles • today at 1:41 AM

I made something like this about a year ago. It worked until it didn't. My assessment is that an individual bypass isn't that hard, but doing it at scale is an entirely different and much harder game to play.

It's a hard game to play because they analyze behaviors across their entire network and detect behavioral patterns that are almost impossible to emulate at scale.

fudged71 • today at 1:26 AM

It’s a good day to have a register of URLs that are Cloudflare gated. FYI my agent says that this is borderline useless and wasn’t needed at all for my purposes.

Onavo • today at 12:52 AM

Also fun tip, if you are ever stuck behind the Anubis PoW proxy, node.crypto is sufficient hardware acceleration to solve it in under a second.

hackernud3s • today at 12:36 AM

Just out of curiousity, which model did you use and what did you say to convince it to help? I'm pretty sure Claude would have told you to kick rocks.

➕ show 2 replies
doctorpangloss • today at 12:03 AM

Is it that difficult? Use a warm Safari profile on a real Mac. Then Turnstile becomes Apple's problem, ie, solved, because they use PAT.

➕ show 4 replies
georgestones • today at 2:00 AM

[dead]

teravor • yesterday at 11:34 PM

the actual value comes from having a solution which tracks cloudflare, a full LLM pipeline for pulling the most recent obfuscated code, reversing it and updating the current solver. without it, users aren't going to have confidence in the continuity of the solver to build around it.

that said, most of the people who really need it roll their own in-house. don't think I have seen someone post it to github yet.

➕ show 1 reply