Cloudflare Turnstile

Cloudflare verification types can appear in different ways.

Standard Turnstile:

Stylized variants:

The challenge is seamlessly integrated into the website.

Looks like a normal Turnstile captcha, but it is actually a Cloudflare challenge.

To confirm Challenge presence, open developer tools, inspect network traffic, and check the page source for typical signs:

• The first request to the site returns a 403 status code.
• The form with id challenge-form has an action attribute containing the parameter __cf_chl_f_tk=.
• The page contains two similar <script> tags that create new values in the window object.

// Function to check for the presence of window.onloadTurnstileCallback
const checkTurnstileCallback = () => {
  return new Promise((resolve, reject) => {
    const timeout = setTimeout(() => reject('Callback timeout'), 30000);

    const interval = setInterval(() => {
      if (window.onloadTurnstileCallback !== undefined) {
        clearInterval(interval);
        clearTimeout(timeout);

        const callbackDetails = window.onloadTurnstileCallback.toString();
        const sitekeyMatch = callbackDetails.match(/sitekey: ['"]([^'"]+)['"]/);
        const actionMatch = callbackDetails.match(/action: ['"]([^'"]+)['"]/);

        resolve({
          sitekey: sitekeyMatch ? sitekeyMatch[1] : null,
          action: actionMatch ? actionMatch[1] : null,
        });
      }
    }, 500);
  });
};

// Try to find any element with data-sitekey
const turnstileElement = document.querySelector('[data-sitekey]');

if (turnstileElement) {
  const sitekey = turnstileElement.getAttribute("data-sitekey");
  console.log("Turnstile Sitekey (from element):", sitekey);
} else {
  console.log("Turnstile element not found. Checking via callback...");

  checkTurnstileCallback()
    .then((data) => {
      console.log("Turnstile Params (from callback):", data);
    })
    .catch((error) => {
      console.error(error);
    });
}

import asyncio
from playwright.async_api import async_playwright

async def run():
    async with async_playwright() as p:
        browser = await p.chromium.launch(headless=False)
        context = await browser.new_context()
        page = await context.new_page()

        await page.goto("https://example.com")  # Replace with your website

        # Try to find an element with data-sitekey
        element = await page.query_selector('[data-sitekey]')
        if element:
            sitekey = await element.get_attribute("data-sitekey")
            print("Turnstile Sitekey (from element):", sitekey)
        else:
            print("Turnstile element not found. Checking via callback...")

            try:
                result = await page.evaluate('''() => {
                    return new Promise((resolve, reject) => {
                        const timeout = setTimeout(() => reject('Callback timeout'), 30000);
                        const interval = setInterval(() => {
                            if (window.onloadTurnstileCallback !== undefined) {
                                clearInterval(interval);
                                clearTimeout(timeout);
                                const cbStr = window.onloadTurnstileCallback.toString();
                                const sitekeyMatch = cbStr.match(/sitekey: ['"]([^'"]+)['"]/);
                                const actionMatch = cbStr.match(/action: ['"]([^'"]+)['"]/);
                                resolve({
                                    sitekey: sitekeyMatch ? sitekeyMatch[1] : null,
                                    action: actionMatch ? actionMatch[1] : null,
                                });
                            }
                        }, 500);
                    });
                }''')
                print("Turnstile Params (from callback):", result)
            except Exception as e:
                print("Error:", e)

        await browser.close()

asyncio.run(run())