Skip to main content
Are you experiencing issues obtaining the token?
Contact support

Amazon | AWS WAF Captcha and Challenge

View full price

Examples of tasks​

Solving captcha and challenge in AWS WAF

More on the topic in our blog
Attention!

CapMonster Cloud uses built-in proxies by default — their cost is already included in the service. You only need to specify your own proxies in cases where the website does not accept the token or access to the built-in services is restricted.

If you are using a proxy with IP authorization, make sure to whitelist the address 65.21.190.34.

Request parameters​

Option 1​

type<string>required

AmazonTask

websiteURL<string>required

The main page address where the captcha is solved.

websiteKey<string>required

Can be found in the apiKey field when rendering captcha.

captchaScript<string>required

Link to jsapi.js on the HTML page, looks like <Integration URL>/jsapi.js.

cookieSolution<boolean>optional

Default is false — the response will include "captcha_voucher" and "existing_token".
If you need the "aws-waf-token" cookie, set to true.

userAgent<string>optional

Browser User-Agent.
Pass only a valid UA from Windows OS. Currently it is: userAgentPlaceholder

proxyType<string>optional

http - regular http/https proxy;
https - try this option only if "http" does not work (required for some custom proxies);
socks4 - socks4 proxy;
socks5 - socks5 proxy.

proxyAddress<string>optional

IPv4/IPv6 proxy address. Not allowed:

  • using transparent proxies (where the client IP is visible);
  • using proxies on local machines.

proxyPort<integer>optional

Proxy port.

proxyLogin<string>optional

Proxy server login.

proxyPassword<string>optional

Proxy server password.

Option 2​

type<string>required

AmazonTask

websiteURL<string>required

The main page address where the captcha is solved.

challengeScript<string>required

Link to challenge.js (see description below).

websiteKey<string>required

A string that can be obtained from the HTML captcha page or using JavaScript: window.gokuProps.key.

context<string>required

A string that can be obtained from the HTML captcha page or using JavaScript: window.gokuProps.context.

iv<string>required

A string that can be obtained from the HTML captcha page or using JavaScript: window.gokuProps.iv.

captchaScript<string>optional

Link to captcha.js (may be absent if only a challenge is present).

cookieSolution<boolean>optional

Default is false — the response will include "captcha_voucher" and "existing_token".
If you need the "aws-waf-token" cookie, set to true.

proxyType<string>optional

http - standard http/https proxy;
https - try this option only if "http" does not work (required for some custom proxies);
socks4 - socks4 proxy;
socks5 - socks5 proxy.

proxyAddress<string>optional

Proxy IPv4/IPv6 address. Not allowed:

  • transparent proxies (where the client IP can be seen);
  • proxies on local machines.

proxyPort<integer>optional

Proxy port.

proxyLogin<string>optional

Proxy server login.

proxyPassword<string>optional

Proxy server password.

Option 3​

If the site uses an invisible captcha and only challenge.js is loaded, use this option.
In this case, you don’t need to pass all parameters from option 2 — they can remain empty. Pass only the challenge.js value.

type<string>required

AmazonTask

websiteURL<string>required

The main page address where the captcha is solved.

challengeScript<string>required

Link to challenge.js.

captchaScript<string>required

Link to captcha.js. In this option, provide any string.

websiteKey<string>required

Provide any string.

context<string>required

Provide any string.

iv<string>required

Provide any string.

cookieSolution<boolean>optional

Set to true to get the "aws-waf token".

proxyType<string>optional

http - standard http/https proxy;
https - try this option only if "http" does not work (required for some custom proxies);
socks4 - socks4 proxy;
socks5 - socks5 proxy.

proxyAddress<string>optional

Proxy IPv4/IPv6 address. Not allowed:

  • transparent proxies (where the client IP can be seen);
  • proxies on local machines.

proxyPort<integer>optional

Proxy port.

proxyLogin<string>optional

Proxy server login.

proxyPassword<string>optional

Proxy server password.

How to obtain websiteKey, context, iv, and challengeScript parameters​

When navigating to the site, you get a 405 response and an HTML page with captcha. You can extract all parameters from this page:

Task creation methods​

Option 1​

POST
https://api.capmonster.cloud/createTask

Request

{
  "clientKey": "API_KEY",
  "task": {
    "type": "AmazonTask",
    "websiteURL": "https://example.com/index.html",
    "websiteKey": "h15hX7brbaRTR...Za1_1",
    "userAgent": "userAgentPlaceholder",
    "captchaScript": "https://234324vgvc23.yejk.captcha-sdk.awswaf.com/234324vgvc23/jsapi.js",
    "cookieSolution": true
  }
}

Response

{
  "errorId": 0,
  "taskId": 407533072
}

Option 2​

POST
https://api.capmonster.cloud/createTask

Request

{
  "clientKey": "API_KEY",
  "task": {
    "type": "AmazonTask",
    "websiteURL": "https://example.com",
    "challengeScript": "https://41bcdd4fb3cb.610cd090.us-east-1.token.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/challenge.js",
    "captchaScript": "https://41bcdd4fb3cb.610cd090.us-east-1.captcha.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/captcha.js",
    "websiteKey": "AQIDA...wZwdADFLWk7XOA==",
    "context": "qoJYgnKsc...aormh/dYYK+Y=",
    "iv": "CgAAXFFFFSAAABVk",
    "cookieSolution": true
  }
}

Response

{
  "errorId": 0,
  "taskId": 407533072
}

Option 3​

POST
https://api.capmonster.cloud/createTask

Request

{
  "clientKey": "API_KEY",
  "task": {
    "type": "AmazonTask",
    "websiteURL": "https://example.com",
    "challengeScript": "https://41bcdd4fb3cb.610cd090.us-east-1.token.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/challenge.js",
    "captchaScript": "",
    "websiteKey": "",
    "context": "",
    "iv": "",
    "cookieSolution": true
  }
}

Response

{
  "errorId": 0,
  "taskId": 407533072
}

Get task result method​

Use the getTaskResult method to get the AmazonTask solution.

POST
https://api.capmonster.cloud/getTaskResult

Request

{
  "clientKey":"API_KEY",
  "taskId": 407533072
}

Response

{
	"errorId":0,
	"status":"ready",
	"solution": {
		"cookies": {
			"aws-waf-token": "10115f5b-ebd8-45c7-851e-cfd4f6a82e3e:EAoAua1QezAhAAAA:dp7sp2rXIRcnJcmpWOC1vIu+yq/A3EbR6b6K7c67P49usNF1f1bt/Af5pNcZ7TKZlW+jIZ7QfNs8zjjqiu8C9XQq50Pmv2DxUlyFtfPZkGwk0d27Ocznk18/IOOa49Rydx+/XkGA7xoGLNaUelzNX34PlyXjoOtL0rzYBxMAQy0D1tn+Q5u97kJBjs5Mytqu9tXPIPCTSn4dfXv5llSkv9pxBEnnhwz6HEdmdJMdfur+YRW1MgCX7i3L2Y0/CNL8kd8CEhTMzwyoXekrzBM="
		},
		"userAgent": "userAgentPlaceholder"
	}
}

How to find all required parameters for task creation​

Automatically​

To automate parameter extraction, you can retrieve them via a browser (regular or headless, e.g., using Playwright) or directly from HTTP requests. Since dynamic parameter values are short-lived, it is recommended to use them immediately after retrieval.

Important!

The provided code snippets are basic examples for learning how to extract the required parameters. The exact implementation will depend on your captcha page, its structure, and the HTML elements and selectors used.

Show code (Node.js)
import { chromium } from "playwright";

const CAPTCHA_URL = "https://example.com";

(async () => {
  const browser = await chromium.launch({ headless: false });
  const page = await browser.newPage();

  await page.goto(CAPTCHA_URL);

  const captchaParams = await page.evaluate(() => {
    const gokuProps = window.gokuProps || {};
    const scripts = Array.from(document.querySelectorAll("script"));

    return {
      websiteKey: gokuProps.key || "Not found",
      context: gokuProps.context || "Not found",
      iv: gokuProps.iv || "Not found",
      challengeScriptUrl:
        scripts.find((script) => script.src.includes("challenge.js"))?.src ||
        "Not found",
      captchaScriptUrl:
        scripts.find((script) => script.src.includes("captcha.js"))?.src ||
        "Not found",
    };
  });

  console.log("Captcha params:", captchaParams);

  await browser.close();
})();

Use the SDK library​

Show code (for browser)
// https://github.com/ZennoLab/capmonstercloud-client-js

import { CapMonsterCloudClientFactory, ClientOptions, AmazonRequest } from '@zennolab_com/capmonstercloud-client';

const API_KEY = "YOUR_API_KEY";  // Specify your CapMonster Cloud API key

document.addEventListener("DOMContentLoaded", async () => {
    const client = CapMonsterCloudClientFactory.Create(
        new ClientOptions({ clientKey: API_KEY })
    );

    // Basic example without proxy
    // CapMonster Cloud automatically uses its own proxies
    let amazonRequest = new AmazonRequest({
        websiteURL: "https://example.com", // URL of the page protected by AWS WAF
        websiteKey: "websiteKey",
        challengeScript: "https://41bcdd4fb3cb.610cd090.us-east-1.token.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/challenge.js",
        captchaScript: "https://41bcdd4fb3cb.610cd090.us-east-1.captcha.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/captcha.js",
        context: "qoJYgnKsc...aormh/dYYK+Y=",
        iv: "CgAAXFFFFSAAABVk",
        cookieSolution: false
    });

    // Example of using your own proxy
    // Uncomment this block if you want to use your own proxy
    /*
    const proxy = {
        proxyType: "http",
        proxyAddress: "123.45.67.89",
        proxyPort: 8080,
        proxyLogin: "username",
        proxyPassword: "password"
    };

    amazonRequest = new AmazonRequest({
        websiteURL: "https://example.com",
        websiteKey: "websiteKey",
        challengeScript: "https://41bcdd4fb3cb.610cd090.us-east-1.token.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/challenge.js",
        captchaScript: "https://41bcdd4fb3cb.610cd090.us-east-1.captcha.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/captcha.js",
        context: "qoJYgnKsc...aormh/dYYK+Y=",
        iv: "CgAAXFFFFSAAABVk",
        proxy,
        userAgent: "userAgentPlaceholder",
        cookieSolution: false
    });
    */

    // Optionally, you can check the balance
    const balance = await client.getBalance();
    console.log("Balance:", balance);

    const result = await client.Solve(amazonRequest);
    console.log("Solution:", result);
});
Show code (Node.js)
// https://github.com/ZennoLab/capmonstercloud-client-js

import { CapMonsterCloudClientFactory, ClientOptions, AmazonRequest } from '@zennolab_com/capmonstercloud-client';

const API_KEY = "YOUR_API_KEY";  // Specify your CapMonster Cloud API key

async function solveAwsWaf() {
    const client = CapMonsterCloudClientFactory.Create(
        new ClientOptions({ clientKey: API_KEY })
    );

    // Basic example without proxy
    // CapMonster Cloud automatically uses its own proxies
    let amazonRequest = new AmazonRequest({
        websiteURL: "https://example.com",               // URL of the page protected by AWS WAF
        websiteKey: "websiteKey",
        challengeScript: "https://41bcdd4fb3cb.610cd090.us-east-1.token.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/challenge.js",
        captchaScript: "https://41bcdd4fb3cb.610cd090.us-east-1.captcha.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/captcha.js",
        context: "qoJYgnKsc...aormh/dYYK+Y=",
        iv: "CgAAXFFFFSAAABVk",
        cookieSolution: false
    });

    // Example of using your own proxy
    // Uncomment this block if you want to use your own proxy

    /*
    const proxy = {
        proxyType: "http",
        proxyAddress: "123.45.67.89",
        proxyPort: 8080,
        proxyLogin: "username",
        proxyPassword: "password"
    };

    amazonRequest = new AmazonRequest({
        websiteURL: "https://example.com", // URL of the page protected by AWS WAF
        websiteKey: "websiteKey",
        challengeScript: "https://41bcdd4fb3cb.610cd090.us-east-1.token.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/challenge.js",
        captchaScript: "https://41bcdd4fb3cb.610cd090.us-east-1.captcha.awswaf.com/41bcdd4fb3cb/0d21de737ccb/cd77baa6c832/captcha.js",
        context: "qoJYgnKsc...aormh/dYYK+Y=",
        iv: "CgAAXFFFFSAAABVk",
        proxy,
        userAgent: "userAgentPlaceholder",
        cookieSolution: false
    });
    */

    // Optionally, you can check the balance
    const balance = await client.getBalance();
    console.log("Balance:", balance);

    const result = await client.Solve(amazonRequest);
    console.log("Solution:", result);
}

solveAwsWaf().catch(console.error);
Was this article helpful?
Check pricing for AI CAPTCHA solver