Cloudflare Turnstile solver library (no headless browser required)(github.com)
220 points by costco 2 days ago | 65 comments
tl;dr: cfsolve is a Rust library and CLI that solves Cloudflare Turnstile widgets and challenge pages without a headless browser, returning either a Turnstile token or a cf_clearance cookie. It works by impersonating a specific browser via profile files containing recorded responses to Cloudflare's browser checks, with Safari on iOS included and support for Chrome(ium). Building requires a pinned Rust toolchain plus CMake, a C/C++ compiler, libclang, and Git for patching BoringSSL.
HN Discussion:
  • ↑Author providing context about regional variations and ongoing maintenance challenges
  • ~Such solvers are inherently unreliable due to constant cat-and-mouse with Cloudflare
  • ~Individual bypasses work but detection at scale is nearly impossible to defeat
  • ↓Publishing bypasses publicly is counterproductive and accelerates CF's countermeasures against legitimate users
  • ~Technical critique noting missing TLS cipher ordering as a likely detection vector