Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Challenge Solved, nope #1187

Closed
4 tasks done
asulwer opened this issue May 10, 2024 · 2 comments
Closed
4 tasks done

Challenge Solved, nope #1187

asulwer opened this issue May 10, 2024 · 2 comments

Comments

@asulwer
Copy link

asulwer commented May 10, 2024

Have you checked our README?

  • I have checked the README

Have you followed our Troubleshooting?

  • I have followed your Troubleshooting

Is there already an issue for your problem?

  • I have checked older issues, open and closed

Have you checked the discussions?

  • I have read the Discussions

Environment

- FlareSolverr version: 3.3.17
- Last working FlareSolverr version: unknown
- Operating system: windows 11
- Are you using Docker: n
- FlareSolverr User-Agent (see log traces or / endpoint): default
- Are you using a VPN: n
- Are you using a Proxy: n
- Are you using Captcha Solver: n
- URL to test this issue: https://www.cardkingdom.com/customer_login

Description

i reported this bug yesterday, but for some reason it marked as a duplicated and closed. i took a considerable amount of time yesterday and today to reproduce this issue.

i reproduced the issue using flaresolverrsharp, python and a powershell script (script below) so its not the flaresolverrsharp library as previously suggested.

i provided a demo account for testing. powershell script below is a modified version of the readme example. the token in the script below can be found by just navigating to the login page (url in script) on that site

$body = @{
    cmd = "request.post"
    url = "https://www.cardkingdom.com/customer_login"
    maxTimeout = 60000
	postData = "_token=urUusa8RAJg8S8hLOxqkYMIPXxojr9cErhno8nzw&dest=https%3A%2F%2Fwww.cardkingdom.com%2Fmyaccount%2Fprofile&email=contact2@acclscompany.com&password=aahHMcrLFKu5V2iw"
} | ConvertTo-Json

irm -UseBasicParsing 'http://localhost:8191/v1' -Headers @{"Content-Type"="application/json"} -Method Post -Body $body

using fiddler (attached image) you can see that once the post happens a couple of redirects occur before finally ending up on the final page (https://www.cardkingdom.com/myaccount/profile). i believe the cdn-cgi/rum? redirect is not required. once the post is made a 403 is returned, then the challenges.

image

Logged Error Messages

[output.json](https://github.com/FlareSolverr/FlareSolverr/files/15269293/output.json)
@asulwer
Copy link
Author

asulwer commented May 10, 2024

i removed sensitive information for safety purposes from below

PS 'Python311\python.exe' 'ms-python.debugpy-2024.6.0-win32-x64\bundled\libs\debugpy\adapter/../..\debugpy\launcher' '64811' '--' 'FlareSolverr-master\src\flaresolverr.py' 
2024-05-09 18:19:22 INFO     ReqId 32268 FlareSolverr 3.3.17
2024-05-09 18:19:22 DEBUG    ReqId 32268 Debug log enabled
2024-05-09 18:19:22 INFO     ReqId 32268 Testing web browser installation...
2024-05-09 18:19:22 INFO     ReqId 32268 Platform: Windows-10-10.0.22631-SP0
2024-05-09 18:19:22 INFO     ReqId 32268 Chrome / Chromium path: chrome.exe
2024-05-09 18:19:22 INFO     ReqId 32268 Chrome / Chromium major version: 126
2024-05-09 18:19:22 INFO     ReqId 32268 Launching web browser...
2024-05-09 18:19:22 DEBUG    ReqId 32268 Launching web browser...
2024-05-09 18:19:24 DEBUG    ReqId 32268 Started executable: `undetected_chromedriver.exe` in a child process with pid: 12576
2024-05-09 18:19:27 INFO     ReqId 32268 FlareSolverr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
2024-05-09 18:19:27 INFO     ReqId 32268 Test successful!
2024-05-09 18:19:27 INFO     ReqId 32268 Serving on http://0.0.0.0:8191
2024-05-09 18:19:38 INFO     ReqId 28504 Incoming request => POST /v1 body: {'postData': '_token=urUusa8RAJg8S8hLOxqkYMIPXxojr9cErhno8nzw&dest=https%3A%2F%2Fwww.cardkingdom.com%2Fmyaccount%2Fprofile', 'cmd': 'request.post', 'url': 'https://www.cardkingdom.com/customer_login', 'maxTimeout': 60000}
2024-05-09 18:19:38 DEBUG    ReqId 28504 Launching web browser...
2024-05-09 18:19:39 DEBUG    ReqId 28504 Started executable: `C:\Users\asulw\appdata\roaming\undetected_chromedriver\chromedriver.exe` in a child process with pid: 30464
2024-05-09 18:19:39 DEBUG    ReqId 28504 New instance of webdriver has been created to perform the request
2024-05-09 18:19:39 DEBUG    ReqId 27820 Navigating to... https://www.cardkingdom.com/customer_login
2024-05-09 18:20:10 INFO     ReqId 27820 Challenge detected. Title found: Just a moment...
2024-05-09 18:20:10 DEBUG    ReqId 27820 Waiting for title (attempt 1): Just a moment...
2024-05-09 18:20:11 DEBUG    ReqId 27820 Timeout waiting for selector
2024-05-09 18:20:11 DEBUG    ReqId 27820 Try to find the Cloudflare verify checkbox...
2024-05-09 18:20:11 DEBUG    ReqId 27820 Cloudflare verify checkbox not found on the page.
2024-05-09 18:20:11 DEBUG    ReqId 27820 Try to find the Cloudflare 'Verify you are human' button...
2024-05-09 18:20:11 DEBUG    ReqId 27820 The Cloudflare 'Verify you are human' button not found on the page.
2024-05-09 18:20:13 DEBUG    ReqId 27820 Waiting for title (attempt 2): Just a moment...
2024-05-09 18:20:15 DEBUG    ReqId 27820 Waiting for title (attempt 2): DDoS-Guard
2024-05-09 18:20:15 DEBUG    ReqId 27820 Waiting for selector (attempt 2): #cf-challenge-running
2024-05-09 18:20:15 DEBUG    ReqId 27820 Waiting for selector (attempt 2): .ray_id
2024-05-09 18:20:15 DEBUG    ReqId 27820 Waiting for selector (attempt 2): .attack-box
2024-05-09 18:20:15 DEBUG    ReqId 27820 Waiting for selector (attempt 2): #cf-please-wait
2024-05-09 18:20:15 DEBUG    ReqId 27820 Waiting for selector (attempt 2): #challenge-spinner
2024-05-09 18:20:15 DEBUG    ReqId 27820 Waiting for selector (attempt 2): #trk_jschal_js
2024-05-09 18:20:15 DEBUG    ReqId 27820 Waiting for selector (attempt 2): td.info #js_info
2024-05-09 18:20:15 DEBUG    ReqId 27820 Waiting for selector (attempt 2): div.vc div.text-box h2
2024-05-09 18:20:15 DEBUG    ReqId 27820 Waiting for redirect
2024-05-09 18:20:15 INFO     ReqId 27820 Challenge solved!
2024-05-09 18:20:18 DEBUG    ReqId 28504 A used instance of webdriver has been destroyed
2024-05-09 18:20:18 DEBUG    ReqId 28504 Response => POST /v1 body: {'status': 'ok', 'message': 'Challenge solved!', 'solution': {'url': 'https://www.cardkingdom.com/customer_login', 'status': 200, 'cookies': [{'domain': 'www.cardkingdom.com', 'expiry': 1715305815, 'httpOnly': False, 'name': '__attentive_ss_referrer', 'path': '/', 'sameSite': 'Lax', 'secure': True, 'value': 'https://www.cardkingdom.com/customer_login'}, {'domain': 'www.cardkingdom.com', 'expiry': 1715305815, 'httpOnly': False, 'name': '__attentive_pv', 'path': '/', 'sameSite': 'Lax', 'secure': True, 'value': '1'}, {'domain': 'www.cardkingdom.com', 'expiry': 1749864015, 'httpOnly': False, 'name': '_attn_', 'path': '/', 'sameSite': 'Strict', 'secure': True, 'value': 'eyJ1Ijoie1wiY29cIjoxNzE1MzA0MDE1NDk0LFwidW9cIjoxNzE1MzA0MDE1NDk0LFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcIjAyNjM0YWJjYjMwNTQwNzM5YmIxYmI1ZmM3ZjRmZTFmXCJ9In0='}, {'domain': '.cardkingdom.com', 'expiry': 1749864015, 'httpOnly': False, 'name': '_ga', 'path': '/', 'sameSite': 'Lax', 'secure': False, 'value': 'GA1.2.421871578.1715304015'}, {'domain': '.cardkingdom.com', 'expiry': 1746840015, 'httpOnly': True, 'name': 'cf_clearance', 'path': '/', 'sameSite': 'None', 'secure': True, 'value': '.tggY.YpOoILzJGdOTiSiHFEj2rKirn4vXM9PHmkN7w-1715304014-1.0.1.1-IFBHQcBsxtfHwbGTT8VLv.GgfTBprgAPjyivstCc4TH.TJQ3o.OuIgPPMNDWmrgSU_QUs_zrS2_q.3eFyBjk7A'}, {'domain': '.cardkingdom.com', 'expiry': 1749864015, 'httpOnly': False, 'name': '_ga_RQ1HKZK562', 'path': '/', 'sameSite': 'Lax', 'secure': False, 'value': 'GS1.1.1715304015.1.0.1715304015.60.0.0'}, {'domain': 'www.cardkingdom.com', 'expiry': 1715908814, 'httpOnly': True, 'name': 'sigt', 'path': '/', 'sameSite': 'Lax', 'secure': False, 'value': 'eyJpdiI6Imw2TzQvRmozZkZEbE9ESURQRHJtaXc9PSIsInZhbHVlIjoiVEQ3Vk8vUjgyd0lGdE0zMVZyL1p0R3hwV214Z3BraDZ6WldVMlRJYkZzWnVqekRzakJaS3F4MmZjV2J2OWVEL0tNL1ZpM2pYRUpkcENzbUN6alZRS0tGWE9qU1ZKc1Eydk4rMitiQTEwMlV0QSsycVJPUzhzWHNCa21JRkJKTGwiLCJtYWMiOiI5M2IwMWFiMjIwNzE3ODc5ZDUxYWFmZDhmMmFhYjcwNTQxZDFlNDljYmUyYzBlOTcwN2MyY2E1NTc0NWYwZDMzIiwidGFnIjoiIn0%3D'}, {'domain': 'www.cardkingdom.com', 'expiry': 1717896014, 'httpOnly': False, 'name': 'XSRF-TOKEN', 'path': '/', 'sameSite': 'Lax', 'secure': True, 'value': 'eyJpdiI6IithYlA2aXplUG44L3UyQ2QvUWxQV3c9PSIsInZhbHVlIjoiZmtUcHBWbXRMdVN2bUdoZmJrZjhvQndXbGhCN2d2TExPREdNUW5iTklOdUNYd1hkcUF3bnFCVkFJOHUzT3cwZ1MzWjlWS2taMHUvb2I4QkFvU0JHdDRnSnBRYVhOVXZjbldJSlgxZ0xwd3M5QXZHLzk5Zy9obE54RmFTekNFRHkiLCJtYWMiOiIzNDZmYzBlZWU4ZDBjYjdmMmQ3NzZiMmZhODkzMTA1OTU3NDdlMTcwNjlkYjdmNzVmZjgwYWE4Yzg3YzFlZjViIiwidGFnIjoiIn0%3D'}, {'domain': 'www.cardkingdom.com', 'expiry': 1715307612, 'httpOnly': False, 'name': 'cf_chl_rc_ni', 'path': '/', 'sameSite': 'None', 'secure': True, 'value': '1'}, {'domain': '.cardkingdom.com', 'expiry': 1716513614, 'httpOnly': False, 'name': 'session_id', 'path': '/', 'sameSite': 'Lax', 'secure': False, 'value': '5m7XRmQSAtTVTWkc3uydCGqQ5FHNWKuU'}, {'domain': 'www.cardkingdom.com', 'expiry': 1715304915, 'httpOnly': False, 'name': '_dd_s', 'path': '/', 'sameSite': 'Strict', 'secure': False, 'value': 'rum=0&expire=1715304915209'}, {'domain': 'www.cardkingdom.com', 'expiry': 1749864015, 'httpOnly': False, 'name': '__attentive_cco', 'path': '/', 'sameSite': 'Lax', 'secure': False, 'value': '1715304015495'}, {'domain': '.cardkingdom.com', 'expiry': 1715390415, 'httpOnly': False, 'name': '_gid', 'path': '/', 'sameSite': 'Lax', 'secure': False, 'value': 'GA1.2.762069438.1715304015'}, {'domain': '.cardkingdom.com', 'httpOnly': True, 'name': '__cfruid', 'path': '/', 'sameSite': 'None', 'secure': True, 'value': '73ff1f17bcb3e6d5634dbab1bb049b405d7cf64b-1715304009'}, {'domain': '.cardkingdom.com', 'expiry': 1715304075, 'httpOnly': False, 'name': '_dc_gtm_UA-4694560-3', 'path': '/', 'sameSite': 'Lax', 'secure': False, 'value': '1'}, {'domain': '.cardkingdom.com', 'httpOnly': True, 'name': '_cfuvid', 'path': '/', 'sameSite': 'None', 'secure': True, 'value': '7XuHyDWRlq_wPsRhJFOHYlejTzUD0BkLD2fkPtE5bOw-1715304009484-0.0.1.1-604800000'}, {'domain': 'www.cardkingdom.com', 'expiry': 1749864015, 'httpOnly': False, 'name': '__attentive_id', 'path': '/', 'sameSite': 'Lax', 'secure': True, 'value': '02634abcb30540739bb1bb5fc7f4fe1f'}, {'domain': 'www.cardkingdom.com', 'expiry': 1717896015, 'httpOnly': True, 'name': 'laravel_session', 'path': '/', 'sameSite': 'Lax', 'secure': False, 'value': 'eyJpdiI6Ik9kcmpvd0dvdU5yc2MzeGdiM091UEE9PSIsInZhbHVlIjoiZkNVVXcvT2VFdXQ3eSt5cjViTkd6L1lBbWl1cVlNakVmd1N1aWFBcWFMVXFwM0lIV0ptZFRnamJ3aUtMV2lGT1FhMnRRTGFrR011NXRrODVEeTVrWkRyaTdVck04NkxQOWJ4REtKRlpxTzVWTGlWUlpiMEpoTlM1QTZtS2lYZC8iLCJtYWMiOiJkNjQ0MDdjNTk1MWFlNjk4NmI5MjQwYjRiZmIyODllY2QzMzMxY2I0OThlNTQ3NjI4M2QxYzU2MDcxOWI4MGJhIiwidGFnIjoiIn0%3D'}, {'domain': '.cardkingdom.com', 'expiry': 1716513614, 'httpOnly': False, 'name': 'session_id_data', 'path': '/', 'sameSite': 'Lax', 'secure': False, 'value': 'e6lhw15fzT1uPQz2%2B1OGSNZPgjwHN5bO2TwpUa3R6Bvk%2FkWzIyxTla2ssm2ElGj0jV8yOsfv9DEPOvPPmk3UO3KB9ntqm%2B2CMIhGNfCcePiKnAietFsWkJ97KVc%2B7OgMlKev5GKsHMYdMFk2BA%3D%3D'}], 'userAgent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36', 'headers': {}, 'response': '<html lang="en"><head>\n<meta http-equiv="content-type" content="text/html; charset=utf-8">\n<meta http-equiv="Cache-control" content="max-age=29030400,public">\n<meta name="description" content="Magic The Gathering, magic cards, singles, decks, card lists, deck ideas, wizards of the coast, all of the cards you need at great prices are available at Cardkingdom.">\n<meta name="keywords" content="Magic The Gathering, magic cards, magic the gathering and purchase, magic singles, magic the gathering pricelist, magic the gathering card lists, magic the gathering deck ideas, magic the gathering cards, magic the gathering cards sell, magic the gathering card prices, wizards of the coast, magic the gathering singles, magic the gathering decks, magic the gathering cardlist, cheap magic singles.">\n<script type="text/javascript" async="" src="https://cdn-scripts.signifyd.com/api/script-tag.js" data-order-session-id="" id="sig-api"></script><script type="text/javascript" async="" src="https://www.googletagmanager.com/gtag/destination?id=AW-1071763609&amp;l=dataLayer&amp;cx=c"></script><script type="text/javascript" async="" src="https://www.google-analytics.com/analytics.js"></script><script type="text/javascript" async="" src="https://www.googletagmanager.com/gtag/js?id=G-RQ1HKZK562&amp;l=dataLayer&amp;cx=c"></script><script async="" src="https://www.datadoghq-browser-agent.com/datadog-rum-v4.js"></script><script async="" src="https://www.googletagmanager.com/gtm.js?id=GTM-NDPBJW"></script><script src="/cdn-cgi/apps/head/eP6FRgbMdwKe8bDs6MHi5IZZuxo.js"></script><link rel="canonical" href="">\n<meta name="twitter:card" content="">\n<meta name="twitter:description" content="">\n<meta name="twitter:title" content="">\n<meta name="twitter:image" content="">\n<meta property="og:site_name" content="Card Kingdom">\n<meta property="og:title" content="Card Kingdom">\n<meta property="og:description" content="Card Kingdom">\n<meta property="og:url" content="">\n<meta property="og:locale" content="en_US">\n<meta property="og:type" content="website">\n<meta http-equiv="Content-Language" content="en">\n<meta property="fb:admins" content="">\n<meta property="article:publisher" content="https://www.facebook.com/*">\n<link href="”*”" rel="”publisher”">\n<meta name="robots" content="index, follow">\n<meta http-equiv="X-UA-Compatible" content="IE=edge">\n<meta name="viewport" content="width=device-width, initial-scale=1">\n<meta name="author" content="">\n<title>\n        Card Kingdom - Magic: the Gathering, MTG, Magic Cards, Singles, EDH, Decks and Supplies    </title>\n<link rel="icon" href="/favicon.ico">\n\n<link rel="preconnect" href="https://fonts.googleapis.com">\n<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin="">\n<link href="https://fonts.googleapis.com/css2?family=Roboto+Flex:opsz,wght@8..144,300;8..144,400;8..144,500;8..144,600;8..144,700&amp;display=swap" rel="stylesheet">\n<link href="https://fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700&amp;display=swap" rel="stylesheet">\n\n<link href="/local/css/bootstrap5-custom.css?id=6542d1870d7cc6fc57d5bd5a041c6243" rel="stylesheet" type="text/css" as="style">\n<link href="/local/css/basic-page.css?id=f3d1f5e9f294d9516b54f4ae38655313" rel="stylesheet" type="text/css" as="style">\n<link href="https://d3lcg6lq93x4d9.cloudfront.net/cms/css/ckcms.css?v=8n9h33n" rel="stylesheet" type="text/css" as="style">\n<script>\n    window.__ENV__ = \'{}\';\n    window.__INITIAL_STATE__ = JSON.stringify({});\n    const ALERT_MESSAGE = "";\n    const ASSETS_HOST = "";\n    const API_HOST = "https://api.cardkingdom.com/api";\n    const CMS_HOST = "https://d3lcg6lq93x4d9.cloudfront.net";\n    const API_SERVICE_HOST = "https://api.cardkingdom.com"; /* https://api.cardkingdom.com/api";  MARTI DEV TEMP*/\n    var ck = {};\n    ck.route = window.location.pathname;\n    ck.userEmail = \'\';\n    ck.orderId = \'\';\n    ck.autoCompleteRoute = \'/local/data/magic.json\';\n    ck.version = \'8n9h33n\';\n    ck.trackerDelay = 5000;//allow pages to override timeout.\n            ck.sitewideCountdown = parseInt(-9897614);\n    </script>\n\n<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({\'gtm.start\':\n            new Date().getTime(),event:\'gtm.js\'});var f=d.getElementsByTagName(s)[0],\n        j=d.createElement(s),dl=l!=\'dataLayer\'?\'&l=\'+l:\'\';j.async=true;j.src=\n        \'https://www.googletagmanager.com/gtm.js?id=\'+i+dl;f.parentNode.insertBefore(j,f);\n    })(window,document,\'script\',\'dataLayer\',\'GTM-NDPBJW\');</script>\n\n<script>\n    setTimeout(function(){\n        (function(w,d,t,r,u){var f,n,i;w[u]=w[u]||[],f=function(){var o={ti:"137010611"};o.q=w[u],w[u]=new UET(o),w[u].push("pageLoad")},n=d.createElement(t),n.src=r,n.async=1,n.onlo2024-05-09 18:20:18 INFO     ReqId 28504 Response in 39.856 s
2024-05-09 18:20:18 INFO     ReqId 28504 127.0.0.1 POST http://localhost:8191/v1 200 OK

@asulwer

This comment was marked as spam.

@asulwer asulwer closed this as not planned Won't fix, can't repro, duplicate, stale May 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant