Cloudflare challenge test site
Self-hosted solver test targets for challengescf.agalm.com.
Widget pages work out of the box with Cloudflare's dummy sitekeys; swap real keys in
sitekeys.js after creating widgets in the dash. Challenge pages
(/under-attack, /interactive, /preclearance-managed)
additionally need the WAF rules from the README.
Turnstile widgets
- Managed widget — the standard interactive checkbox
- Managed widget with cData
- Managed widget with action
- Managed widget with cData and action
- Non-interactive widget
- Invisible widget
Challenge pages (need WAF rules — see README)
- Under Attack Mode — managed challenge on the path
- Interactive Challenge — forced-interactive WAF action
- Pre-clearance managed widget — challenge + widget on one path
Solver
Every page shows the exact
createTask body for this gateway
(CloudflareTurnstileTaskProxyLess for widgets,
AntiCloudflareTaskProxyLess for challenge pages).
Verify tokens server-side with POST /verify (needs the Pages
function + a secret key; see README).