Now broken

[momala454]

Since today, the script is broken because the url on the form is encoded with &xxx;, so the script tries to submit to url containing &

the fix on UAMPageFormParams function on main/Model/UAM/UAMPageFormParams.php

modify like this
return new UAMPageFormParams(
$sMatches[1],
$jschlVcMatches[1],
$passMatches[1],
self::getJschlAnswerFromPage($pageAttributes),
htmlspecialchars_decode($urlMatches[1])
);

[gergokee]

Well for me it is still not working with this change:

Tried reaching this page:
https://predb.me/?search=720p

"[ERROR] UAM (retry: 0) -> clearance cookie missing! Unknown error -> CF clearance could not be found!"

[judgdredd]

Yeah it's definitely NOT working. I've tested it on http://medium.com https://torrentz2.eu and various others. My script that was working for over 7 months just stopped working recently due to the bypasser not solving the cloudflare problem and instead returns the usual

setTimeout(function(){\n var s,t,o,p,b,r,e,a,k,i,n,g,f, CNVCtJR={"USHdsl":+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![ ▶ g = String.fromCharCode;\n o = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";\n e = function(s) {\n s += "==".slice(2 - (s.length & 3));\n var bm, r = "", r1, r2, i = 0;\n for (; i < s.length;) {\n bm = o.indexOf(s.charAt(i++)) << 18 | o.indexOf(s.charAt(i++)) << 12\n | (r1 = o.indexOf(s.charAt(i++))) << 6 | (r2 = o.indexOf(s.charAt(i++)));\n r += r1 === 64 ? g(bm >> 16 & 255)\n : r2 === 64 ? g(bm >> 16 & 255, bm >> 8 & 255)\n : g(bm >> 16 & 255, bm >> 8 & 255, bm & 255);\n }\n return r;\n

[momala454]

i tried both url http://medium.com https://torrentz2.eu and they works.
Make sure you put all of those headers (with different values if you want, but they must be present)

'Connection: Keep-Alive', 
'Accept-Language: *', 
'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:54.0) Gecko/20100101 Firefox/54.0', 
'Accept: */*', 
'Accept-Encoding: deflate, gzip', 
'Upgrade-Insecure-Requests: 1'

[momala454]

actually i'll reopen until another release is done with the change for this bug as it's in master

[judgdredd]

This is some of the code re: the headers

And this is the result

[judgdredd]

This might be a bit messy but the below is the dump output in a terminal of https://torrentz2.eu using your CFCurlTest.php file directly.

`"""

\n \n \n \n \n \n \n \n \n <title>Just a moment...</title>\n <style type="text/css">\n html, body {width: 100%; height: 100%; margin: 0; padding: 0;}\n body {background-color: #ffffff; color: #000000; font-family:-apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ubuntu, "Helvetica Neue",Arial, sans-serif; font-size: 16px; line-height: 1.7em;-webkit-font-smoothing: antialiased;}\n h1 { text-align: center; font-weight:700; margin: 16px 0; font-size: 32px; color:#000000; line-height: 1.25;}\n p {font-size: 20px; font-weight: 400; margin: 8px 0;}\n p, .attribution, {text-align: center;}\n #spinner {margin: 0 auto 30px auto; display: block;}\n .attribution {margin-top: 32px;}\n @Keyframes fader { 0% {opacity: 0.2;} 50% {opacity: 1.0;} 100% {opacity: 0.2;} }\n @-webkit-keyframes fader { 0% {opacity: 0.2;} 50% {opacity: 1.0;} 100% {opacity: 0.2;} }\n #cf-bubbles > .bubbles { animation: fader 1.6s infinite;}\n #cf-bubbles > .bubbles:nth-child(2) { animation-delay: .2s;}\n #cf-bubbles > .bubbles:nth-child(3) { animation-delay: .4s;}\n .bubbles { background-color: #f58220; width:20px; height: 20px; margin:2px; border-radius:100%; display:inline-block; }\n a { color: #2c7cb0; text-decoration: none; -moz-transition: color 0.15s ease; -o-transition: color 0.15s ease; -webkit-transition: color 0.15s ease; transition: color 0.15s ease; }\n a:hover{color: #f4a15d}\n .attribution{font-size: 16px; line-height: 1.5;}\n .ray_id{display: block; margin-top: 8px;}\n </style>\n \n <script type="text/javascript">\n //> 16 & 255)\n : r2 === 64 ? g(bm >> 16 & 255, bm >> 8 & 255)\n : g(bm >> 16 & 255, bm >> 8 & 255, bm & 255);\n }\n return r;\n };\n t = document.createElement('div');\n t.innerHTML="x";\n t = t.firstChild.href;r = t.match(/https?:\/\//)[0];\n t = t.substr(r.length); t = t.substr(0,t.length-1); k = 'cf-dn-WcZg';\n a = document.getElementById('jschl-answer');\n f = document.getElementById('challenge-form');\n ;ejcfWtj.McWSUKeOQALD*=+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![]+!![])+(!+[]+!![])+(!+[]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]))/+((!+[]+!![]+!![]+[])+(+[])+(!+[]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![]+!![]));ejcfWtj.McWSUKeOQALD*=+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![]+!![])+(+!![])+(!+[]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]))/+((!+[]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![])+(+!![])+(!+[]+!![]+!![]+!![])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]));ejcfWtj.McWSUKeOQALD*=+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![])+(+[])+(+[])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]))/+((+!![]+[])+(!+[]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!![])+(+[])+(!+[]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![])+(+!![]));ejcfWtj.McWSUKeOQALD*=+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![]))/+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![])+(!+[]+!![]+!![])+(+[])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]));ejcfWtj.McWSUKeOQALD+=+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![]))/+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+[])+(!+[]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![])+(!+[]+!![]+!![]+!![])+(!+[]+!![])+(!+[]+!![]));ejcfWtj.McWSUKeOQALD-=+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![]+!![])+(+!![])+(!+[]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]))/+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![])+(!+[]+!![]+!![])+(+[])+(!+[]+!![]+!![])+(!+[]+!![]+!![])+(+[]));ejcfWtj.McWSUKeOQALD*=function(p){var p = eval(eval(e("ZG9jdW1l")+(undefined+"")[1]+(true+"")[0]+(+(+!+[]+[+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+[!+[]+!+[]]+[+[]])+[])[+!+[]]+g(103)+(true+"")[3]+(true+"")[0]+"Element"+g(66)+(NaN+[Infinity])[10]+"Id("+g(107)+")."+e("aW5uZXJIVE1M"))); return +(p)}();ejcfWtj.McWSUKeOQALD+=+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![])+(+!![])+(+[])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!![]))/+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]));ejcfWtj.McWSUKeOQALD-=+((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![])+(+!![])+(+[])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!![]))/+((+!![]+[])+(!+[]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![])+(!+[]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]));a.value = (+ejcfWtj.McWSUKeOQALD).toFixed(10); '; 121'\n f.action += location.hash;\n f.submit();\n }, 4000); /*eoc*/\n }, false);\n })();\n //]]>\n </script>\n \n \n \n \n \n \n \n \n \n

\n \n \n Please turn JavaScript on and reload the page. \n \n \n \n \n \n \n \n \n Checking your browser before accessing torrentz2.eu. \n \n This process is automatic. Your browser will redirect to your requested content shortly. \n Please allow up to 5 seconds… \n \n \n \n \n \n \n \n \n \n +((!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![])+(+[])+(!+[]+!![]+!![]+!![])+(!+[]+!![])+(!+[]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]))/+((!+[]+!![]+!![]+!![]+!![]+[])+(+!![])+(!+[]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(!+[]+!![]+!![]+!![]+!![]+!![])) \n \n \n \n \n \n \n DDoS protection by Cloudflare\n \n Ray ID: 5732b6e44b776561\n \n

\n \n \n`

[judgdredd]

Okay.. So it's important to note i've been using the version pulled and updated from composer require kyranrana/cloudflare-bypass

That being said i did the patch tweaks above to no avail.

I just downloaded the zip file directly from here and unpacked it in the vendor dir and now everything is working. So what is obtained via composer and what fixed are provided here don't work. I'd say update the composer package to what's in the master.zip here.

[momala454]

yeah i don't get why he don't make a new release

[jaymoulin]

@momala454 I'm pretty sure maintaining this kind of product is really time consuming and Kyran prefer spending time on other things. I already gave him some recommendations for this package to be more usable here : #157

As I am, and many other users are, stuck with this package release process, I published a fork https://github.com/jaymoulin/cloudflare-bypass which is just a usable automatically updated fork of this repo.

Basically, every time a PR is merged, or a commit is pushed to this master, my package will update and make a usable unstable release (dev-master) available on packagist, therefore, composer (composer require jaymoulin/cloudflare-bypass:dev-master).

Also, I added a functional test case to check with both https://torrentz2.eu and https://medium.com on GitHub's servers to check the package's behaviour and details (https://github.com/jaymoulin/cloudflare-bypass/actions?query=workflow%3ACI)

As this package is a unstable package, you all have to decrease minimum-stability of your composer.json file to dev (and adding prefer-stable to true when possible). Sorry, but this is mandatory as #157 is still open.

I'm not really happy I had to do this but I understand some of Kyran's choices.
I hope this is only a temporary fix and it will unstuck people.

[gergokee]

Well i tried it again, but still can't access https://torrentz2.eu
Tried from 2 different servers:

• first server error: "clearance cookie missing! Unknown error -> CF clearance could not be found!"
• second server error: "[ERROR] Captcha (retry: 1) -> not supported! Unknown error -> Captcha page is not supported!"

[nitemare]

i'm getting the same errors for https://torrentz2.eu and https://torrentz2.is