Rust library solves Cloudflare Turnstile without a headless browser
Cloudflare Turnstile solver library (no headless browser required)
cfsolve is a Rust library and CLI that impersonates a real Safari or Chrome profile to solve Cloudflare Turnstile widgets and challenge pages purely through requests, returning a token or cf_clearance cookie. It ships with an iPhone Safari profile, supports sitekey-only solving and custom HTML, and requires no headless browser. The project is MIT-licensed and includes a capture proxy for recording browser checks.
Send the cf_clearance cookie from the same IP address and user agent as the profile, or Cloudflare will reject it.
- costco
Author here. I submitted this a few days ago but seems like it was added to the second chance pool so now it’s on the front page. Anyways, I have received a report from a user that this solver did not work for them with European proxies but did with US proxies… so they may be serving different versions for different regions. I will fix that soon. I’m not at my computer right now but it was working when I tested it a few hours ago (Cloudflare constantly changes things).
- paaloeye
For better or worse, it's like `yt-dlp` — constant race against CF, so it's not reliable. It's probably for better.
- manofmanysmiles
I made something like this about a year ago. It worked until it didn't. My assessment is that an individual bypass isn't that hard, but doing it at scale is an entirely different and much harder game to play.
It's a hard game to play because they analyze behaviors across their entire network and detect behavioral patterns that are almost impossible to emulate at scale.
- publlus_enigma
Sigh. Once again computers have been shown to do better something than I can, for a task where ostensibly the inverse should hold true.
- Onavo
Also fun tip, if you are ever stuck behind the Anubis PoW proxy, node.crypto is sufficient hardware acceleration to solve it in under a second.