search

codemanki / cloudscraper

--DEPRECATED -- 🛑 🛑 Node.js library to bypass cloudflare's anti-ddos page
MIT License
603 stars 141 forks source link

Fragment identifier is not appended to the JS challenge form's action URI #203

Closed ghost closed 5 years ago

ghost commented 5 years ago

The IUAM JS challenge appends the fragment identifier (#hashtag) of the window.location to the form's action URI before submission. Cloudscraper is not currently mimicking this behavior.

Example JS challenge:


window.addEventListener("DOMContentLoaded", function() {
  setTimeout(function() {
    // ... document.getElementById("jschl_answer").value = Number()
    f.action += location.hash;
    f.submit();
  }, 4000);
}, false);
ghost commented 5 years ago

@VeNoMouS

VeNoMouS commented 5 years ago

Interesting... I did see that the other day... but thought nothing of it..

VeNoMouS commented 5 years ago

Looking at mitm's / debugging... it doesn't actually send that hash from what I can see...