How to Solve AWS Captcha / Challenge with PHP: A Comprehensive Guide

<?php

// --- Configuration ---
$PROXY = "http://username:password@host:port"; // OPTIONAL: Replace with your proxy details (e.g., for AntiAwsWafTask)
$PAGE_URL = "https://norway-meetup.aws.wslab.no/";  // Replace with the target URL protected by AWS WAF
$CLIENT_KEY = "YourPayPerUsage";  // Replace with your CAPSOLVER API Key

/**
 * Submits a task to the CapSolver API.
 * @param array $payload The task payload containing type and parameters.
 * @return array The API response, including the taskId.
 */
function createTask($payload) {
    global $CLIENT_KEY;
    $ch = curl_init();
    echo("Creating task...\n");
    curl_setopt($ch, CURLOPT_URL, 'https://api.capsolver.com/createTask');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode(['clientKey' => $CLIENT_KEY, 'task' => $payload]));
    curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
    $response = curl_exec($ch);
    curl_close($ch);
    return json_decode($response, true);
}

/**
 * Polls the CapSolver API for the task result.
 * @param string $taskId The ID of the task to check.
 * @return array The API response containing the solution.
 */
function getTaskResult($taskId) {
    global $CLIENT_KEY;
    do {
        echo("Waiting for solution...\n");
        sleep(1);
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, 'https://api.capsolver.com/getTaskResult');
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode(['clientKey' => $CLIENT_KEY, 'taskId' => $taskId]));
        curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
        $response = curl_exec($ch);
        curl_close($ch);
        $data = json_decode($response, true);
        
        if (isset($data['status']) && $data['status'] == "ready") {
            return $data;
        }
        
        // Handle potential errors from getTaskResult
        if (isset($data['errorId']) && $data['errorId'] != 0) {
            echo("Error retrieving task result: " . $data['errorDescription'] . "\n");
            return null;
        }
        
    } while(true);
}

/**
 * Solves the AWS WAF Challenge or Captcha using the appropriate task type.
 * @param string $taskType The CapSolver task type (AntiAwsWafTask or AwsCaptchaTask).
 * @param array $params The parameters required for the task.
 * @return string|null The aws-waf-token cookie value or null on failure.
 */
function solveAwsWaf($taskType, $params) {
    global $PAGE_URL, $PROXY;
    
    $payload = [
        'type' => $taskType,
        'websiteURL' => $PAGE_URL,
        'proxy' => $PROXY,
    ];
    
    // Merge specific parameters for the task
    $payload = array_merge($payload, $params);
    
    // Clean up empty values for a cleaner request
    $payload = array_filter($payload, function($value) {
        return $value !== "" && $value !== null;
    });

    $taskData = createTask($payload);
    
    if (isset($taskData['taskId'])) {
        $result = getTaskResult($taskData['taskId']);
        if ($result && isset($result['solution']['cookie'])) {
            return $result['solution']['cookie'];
        }
    }
    
    return null;
}

// --- Main Execution Logic ---

// 1. Initial request to the protected page
$ch = curl_init($PAGE_URL);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
$response = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$cookie = null;

echo("Initial HTTP Code: " . $httpCode . "\n");

if ($httpCode == 202) {
    // --- Challenge (202) Handling ---
    echo("Challenge detected (HTTP 202). Extracting parameters...\n");
    
    // Extract the challenge.js URL
    preg_match('/<script src="([^"]*token.awswaf.com[^"]*)"/', $response, $matches);
    $awsChallengeJS = $matches[1] ?? null;
    
    if ($awsChallengeJS) {
        $params = ['awsChallengeJS' => $awsChallengeJS];
        $cookie = solveAwsWaf("AntiAwsWafTask", $params);
    } else {
        echo("Error: awsChallengeJS not found for Challenge.\n");
    }

} elseif ($httpCode == 405) {
    // --- CAPTCHA (405) Handling ---
    echo("CAPTCHA detected (HTTP 405). Extracting parameters...\n");
    
    // Extract parameters from the page content
    preg_match('/<script src="([^"]*token.awswaf.com[^"]*)"/', $response, $matches);
    $awsChallengeJS = $matches[1] ?? null;
    
    preg_match('/"key":"(.*?)"/', $response, $matches);
    $awsKey = $matches[1] ?? null;
    
    preg_match('/"iv":"(.*?)"/', $response, $matches);
    $awsIv = $matches[1] ?? null;
    
    preg_match('/"context":"(.*?)"/', $response, $matches);
    $awsContext = $matches[1] ?? null;
    
    if ($awsKey && $awsIv && $awsContext) {
        $params = [
            'awsKey' => $awsKey,
            'awsIv' => $awsIv,
            'awsContext' => $awsContext,
            'awsChallengeJS' => $awsChallengeJS // Optional but recommended
        ];
        // Note: The task type for visual CAPTCHA is often still AntiAwsWafTask, 
        // but the parameters passed are what determine the solution type on CapSolver's side.
        $cookie = solveAwsWaf("AntiAwsWafTask", $params); 
    } else {
        echo("Error: Key, IV, or Context parameters not found for CAPTCHA.\n");
    }
}

// 3. Use the token to access the protected resource
if ($cookie) {
    echo("Successfully obtained aws-waf-token. Making final request...\n");
    
    $ch = curl_init($PAGE_URL);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    // Set the aws-waf-token cookie
    curl_setopt($ch, CURLOPT_COOKIE, "aws-waf-token=" . $cookie);
    
    $finalResponse = curl_exec($ch);
    curl_close($ch);
    
    echo "\n--- Final Page Content ---\n";
    echo $finalResponse;
    echo "\n--------------------------\n";
} else {
    echo("Failed to solve AWS WAF challenge/captcha.\n");
}

?>