Use a bash command under a cloudflare-scrape session about cloudflare-scrape HOT 3 CLOSED

CloudFlare has started to append a refresh header at the protection page with the actual answer and everything, you could just use that.

from cloudflare-scrape.

@Zalvie Nope, the Refresh header only includes the pass value, which is their newly added time token (Unix time + MAC hash to prevent tampering) to ensure a client has waited a certain number of seconds before getting past the challenge. jschl_answer is the parameter for the actual answer. I'm guessing the Refresh header was possibly added to improve performance for clients who've already passed the challenge once, though I'm not entirely sure of the intended flow... it would be very silly of them to include the actual answer there, since that defeats the point.

from cloudflare-scrape.

@Sh0cknsl I created 2 convenience functions to help with extracting just the cookies: get_tokens() and get_cookie_string(). See https://github.com/Anorov/cloudflare-scrape#integration

For weevely in particular, you're going to want to modify additional_headers in core/config.py. See https://github.com/epinna/weevely3/blob/master/core/config.py#L32

At the bottom of config.py but before the DO NOT CHANGE LINE, I would add something like

import cfscrape

cookie = cfscrape.get_cookie_string("http://somesite.com")
additional_headers.append(("Cookie", cookie))

from cloudflare-scrape.