Bypass Cloudflare with Puppeteer

import puppeteer from 'puppeteer';

// This will likely be blocked by Cloudflare
const browser = await puppeteer.launch({
  headless: true,
  args: ['--no-sandbox']
});

const page = await browser.newPage();

// Cloudflare detects headless Chrome and shows challenge page
await page.goto('https://cloudflare-protected-site.com');

// Script fails or gets blocked
const content = await page.content();
await browser.close();

import puppeteer from 'puppeteer-core';

// Use stealth mode with additional evasion options
const browser = await puppeteer.connect({
  browserWSEndpoint:
    'wss://production-sfo.browserless.io?token=YOUR_API_KEY&stealth=true'
});

const page = await browser.newPage();

// Set realistic viewport and user agent
await page.setViewport({ width: 1920, height: 1080 });

// Navigate with realistic timing
await page.goto('https://cloudflare-protected-site.com', {
  waitUntil: 'networkidle2',
  timeout: 30000
});

// Wait for Cloudflare challenge to resolve (if present)
try {
  await page.waitForSelector('body', { timeout: 10000 });
} catch (error) {
  console.log('Cloudflare challenge detected, waiting for bypass...');
  await page.waitForTimeout(5000);
}

// Extract data after bypassing Cloudflare
const data = await page.evaluate(() => {
  return {
    title: document.title,
    content: document.body.textContent
  };
});

console.log('Data extracted:', data);
await browser.close();

// Use Browserless REST API to bypass Cloudflare
const response = await fetch('https://production-sfo.browserless.io/content', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Authorization': 'Bearer YOUR_API_KEY'
  },
  body: JSON.stringify({
    url: 'https://cloudflare-protected-site.com',
    waitFor: 'networkidle2',
    stealth: true
  })
});

const html = await response.text();
console.log('Successfully bypassed Cloudflare:', html);

Cloudflare analyzes dozens of browser properties to detect automation. We randomize and sanitize fingerprints including user agent, screen resolution, WebGL renderer, audio context, fonts, plugins, and timezone. WebDriver flags are removed completely.

When Cloudflare presents a Turnstile challenge, our system automatically detects and solves it using integrated CAPTCHA solving services. The challenge is resolved transparently without any code changes.

Cloudflare tracks mouse movements, keyboard timing, and scroll patterns. Our browsers simulate realistic human behavior with natural timing variations and movement patterns that pass behavioral analysis.

Cloudflare examines TLS handshakes to identify automated browsers. We use realistic TLS fingerprints that match real Chrome browsers to avoid detection at the network level.

Optional residential proxy integration allows you to route requests through residential IPs, avoiding Cloudflare's datacenter IP blocking. Support for rotating proxies and geo-targeting.