Versions Compared

Old Version 12

changes.mady.by.user potkl

Saved on

compared with

New Version Current

changes.mady.by.user potkl

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Parameter

Type

Required

Description

abck

string

true

abck cookie in your session (need to be the latest)

pageUrl

string

true

your target page url that you want to bypass

bmsz

string

true

bm sz cookie value (need to be the latest)

ua

string

true

UserAgent you use in the program.

lang

string

true

The language like “en-US”

Create Task

Example

POST https://sync.ez-captcha.com/createSyncTask
Content-Type: application/json

Code Block
{
    "clientKey": "YourClientKey",
    "task": {
        "type": "AkamaiWEBTaskProxyless",
        "abck": "xxxx",
        "pageUrl": "xxxx",
        "bmsz": "xxxx",
        "ua": "xxx",
        "lang": "en-US"
    }
}

API return a payload in response body. you need to generate new sensor data 3 times to get valid abck . So you need to use the latest abck cookie values to request our API to get new sensor data everytime, and finally get the valid abck value.

...

Code Block
{
	"errorId": 0,
	"solution": {
		"payload": "xxxxxxxxxxxxxxxxxxxxxxxxxxxx"
	},
	"status": "ready"
}

 

428 StatusCode

If after the above steps, a 428 status code response is received when sending a request to the target url, it indicates that the Sec-CPT mechanism has been triggered. You need to follow these steps:

  1. Obtain the chlg_duration parameter from the response body for subsequent operations.

  2. Once again, retrieve sensor_data according to previous steps with the new pageUrlparameter as the original pageUrl + "/_sec/cp_challenge/ak-challenge-3-6.htm" (the version number in the path should be changed to the correct version used by the website), then submit.

  3. Sleep for a duration of time based on the chlg_duration parameter obtained earlier.

  4. Retrieve sensor data once again and submit.

  5. If successful in the end, you will receive sec-cpt cookie from the response. Then you can make another request to access the target interface.