top | item 45339216

"Bypassing" Cloudflare's Turnstile Captcha with Thermoptic

15 points| mandatory | 5 months ago |github.com

1 comment

order

mikeinseattle|5 months ago

This is a really interesting writeup - but something I think a lot of people underestimate is how often these turnstiles are implemented improperly which then makes it pretty easy to spoof / bypass them entirely?

Curious if there's boilerplate provided by cloudflare or a third-party for common JS frameworks like Next and React? For instance, starting very basic like "protecting a web-form submit button / route until the turnstile passes"?