AWS WAF Bypass & Captcha Solver 🔥 $1/1K

Description

This Actor is a lightweight, Node.js-based AWS WAF Unblocker and Captcha Solver. It is designed to bypass AWS WAF protections by solving JavaScript challenges directly in a custom, handcrafted sandbox.

Unlike traditional anti-bot solutions that rely on heavy browser automation tools or overly engineered setups, this actor offers a highly efficient way to unblock requests and solve captchas without the extra overhead.

Features

• Lightweight & Fast: No headless browser required; runs directly in Node.js. Lightning fast and runs on as little as 128MB of memory.
• Browser Fingerprinting: Simulates a browser environment (DOM, Navigator, WebGL) to pass challenge checks.
• Automatic Token Handling: Automatically extracts the aws-waf-token upon successful solution.
• Optional Request Execution: Can either return just the token or proceed to fetch the protected content using the generated token.
• Concurrency Support: parallel processing of multiple URLs for increased throughput.

Pricing

The usage cost for this actor is $1.00 per 1,000 results.

Note 📝 Free Tier users are restricted to processing a maximum of 5 URLs per run.

Input Configuration

The actor accepts the following input parameters:

Field	Type	Default	Description
targetPagesOrApiEndpoints	Array	[...]	A list of target URLs or API endpoints that are protected by AWS WAF.
executeAndGetResponse	Boolean	false	If true, the actor will use the generated token to request the target URL and return the response body. If false, it returns only the solution token.

Example Input

{
    "targetPagesOrApiEndpoints": [
        "https://www.binance.com/en/price/bitcoin"
    ],
    "executeAndGetResponse": true
}

Output

The actor pushes results to the default dataset. Each item represents a processed URL.

Output Structure

The following is an extensive list of potential output fields. Note that not all fields will be present in every result; their availability depends on the specific input URL, whether a WAF challenge was detected/solved, and other runtime actions.

Field	Type	Description
initialUrl	String	The URL that was processed.
solved	Boolean	Indicates if the WAF challenge was successfully solved (or if no challenge was present).
aws-waf-token	String	The generated WAF token (only if a challenge was intercepted and solved).
body	String	The content of the target page (only if executeAndGetResponse is true).
error	String	Error message if the process failed.

📝 Note

If the target page returns a 200 OK immediately (no WAF challenge triggered), the aws-waf-token field will not be present in the output, as no token generation was necessary.

Using the Solution

You can use this actor in two ways:

1. Automatic Content Retrieval: Set executeAndGetResponse: true to have the actor automatically fetch the protected page after solving the challenge. The HTML/JSON content will be available in the body output field.
2. Manual Token Usage: Use the generated aws-waf-token yourself to bypass the WAF on subsequent requests. Simply include it as a cookie in your headers:

Cookie: aws-waf-token=<YOUR_TOKEN_HERE>

Status Code Handling

The actor intelligently handles different responses from the target URL:

• 200 OK: If the target URL returns a 200 status code immediately (meaning no WAF intercept), the actor marks the request as solved (solved: true) and returns the body without attempting to solve a challenge.
• Other Status Codes (e.g., 405, 202): If the target returns a status code indicating a block or challenge and contains the WAF challenge script, the actor initiates the solver process to generate a valid token.

Disclaimer

Ensure you comply with the terms of service of any website you interact with.

Support

If you have questions, customization requests, or want another antibot solver, please reach out to us at:

• Email: labs@azzouzana.com
• Discord: @azzouzana