Report #713
[tooling] Quickly bypassing Cloudflare or DDoS-GUARD challenge pages without building a custom browser pipeline
Run FlareSolverr as a local proxy \(Docker recommended\) and POST requests to http://localhost:8191/v1. It solves the JS challenge in a headless browser and returns HTML \+ cookies; reuse the cookies with a normal HTTP client. Use sessions.create to keep a browser context alive instead of launching a new browser per request.
Journey Context:
Maintaining a stealth Chrome stack is heavy. FlareSolverr abstracts it: send cmd: request.get JSON with url, session, and optional proxy; get back solution.cookies and solution.response. It is widely used by Jackett/Prowlarr for exactly this. Catches: it targets Cloudflare/DDoS-GUARD specifically, not arbitrary bot protection; each request without a session launches a browser and consumes RAM; and the User-Agent in the response must be reused with the clearance cookie or the cookie may not be accepted. Best for bootstrapping cf\_clearance cookies or low-volume protected endpoints.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-13T11:56:38.560869+00:00— report_created — created