如何使用 PHP 解决 AWS 验证码/挑战：全面指南

<?php

// --- 配置 ---
$PROXY = "http://username:password@host:port"; // 可选：替换为您的代理信息（例如用于AntiAwsWafTask）
$PAGE_URL = "https://norway-meetup.aws.wslab.no/";  // 替换为受AWS WAF保护的目标URL
$CLIENT_KEY = "YourPayPerUsage";  // 替换为您的CAPSOLVER API密钥

/**
 * 向CapSolver API提交任务。
 * @param array $payload 包含类型和参数的任务负载。
 * @return array API响应，包括taskId。
 */
function createTask($payload) {
    global $CLIENT_KEY;
    $ch = curl_init();
    echo("创建任务...\n");
    curl_setopt($ch, CURLOPT_URL, 'https://api.capsolver.com/createTask');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode(['clientKey' => $CLIENT_KEY, 'task' => $payload]));
    curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
    $response = curl_exec($ch);
    curl_close($ch);
    return json_decode($response, true);
}

/**
 * 轮询CapSolver API以获取任务结果。
 * @param string $taskId 要检查的任务ID。
 * @return array API响应，包含解决方案。
 */
function getTaskResult($taskId) {
    global $CLIENT_KEY;
    do {
        echo("等待解决方案...\n");
        sleep(1);
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, 'https://api.capsolver.com/getTaskResult');
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode(['clientKey' => $CLIENT_KEY, 'taskId' => $taskId]));
        curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
        $response = curl_exec($ch);
        curl_close($ch);
        $data = json_decode($response, true);
        
        if (isset($data['status']) && $data['status'] == "ready") {
            return $data;
        }
        
        // 处理getTaskResult可能的错误
        if (isset($data['errorId']) && $data['errorId'] != 0) {
            echo("获取任务结果时出错: " . $data['errorDescription'] . "\n");
            return null;
        }
        
    } while(true);
}

/**
 * 使用适当的task类型解决AWS WAF Challenge或Captcha。
 * @param string $taskType CapSolver的task类型（AntiAwsWafTask或AwsCaptchaTask）。
 * @param array $params 任务所需的参数。
 * @return string|null aws-waf-token cookie值或失败时为null。
 */
function solveAwsWaf($taskType, $params) {
    global $PAGE_URL, $PROXY;
    
    $payload = [
        'type' => $taskType,
        'websiteURL' => $PAGE_URL,
        'proxy' => $PROXY,
    ];
    
    // 合并特定任务参数
    $payload = array_merge($payload, $params);
    
    // 清理空值以获得更简洁的请求
    $payload = array_filter($payload, function($value) {
        return $value !== "" && $value !== null;
    });

    $taskData = createTask($payload);
    
    if (isset($taskData['taskId'])) {
        $result = getTaskResult($taskData['taskId']);
        if ($result && isset($result['solution']['cookie'])) {
            return $result['solution']['cookie'];
        }
    }
    
    return null;
}

// --- 主执行逻辑 ---

// 1. 向受保护页面发送初始请求
$ch = curl_init($PAGE_URL);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
$response = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$cookie = null;

echo("初始HTTP代码: " . $httpCode . "\n");

if ($httpCode == 202) {
    // --- Challenge（202）处理 ---
    echo("检测到Challenge（HTTP 202）。提取参数...\n");
    
    // 提取challenge.js的URL
    preg_match('/<script src="([^"]*token.awswaf.com[^"]*)"/', $response, $matches);
    $awsChallengeJS = $matches[1] ?? null;
    
    if ($awsChallengeJS) {
        $params = ['awsChallengeJS' => $awsChallengeJS];
        $cookie = solveAwsWaf("AntiAwsWafTask", $params);
    } else {
        echo("错误：未找到Challenge的awsChallengeJS。\n");
    }

} elseif ($httpCode == 405) {
    // --- CAPTCHA（405）处理 ---
    echo("检测到CAPTCHA（HTTP 405）。提取参数...\n");
    
    // 从页面内容中提取参数
    preg_match('/<script src="([^"]*token.awswaf.com[^"]*)"/', $response, $matches);
    $awsChallengeJS = $matches[1] ?? null;
    
    preg_match('/"key":"(.*?)"/', $response, $matches);
    $awsKey = $matches[1] ?? null;
    
    preg_match('/"iv":"(.*?)"/', $response, $matches);
    $awsIv = $matches[1] ?? null;
    
    preg_match('/"context":"(.*?)"/', $response, $matches);
    $awsContext = $matches[1] ?? null;
    
    if ($awsKey && $awsIv && $awsContext) {
        $params = [
            'awsKey' => $awsKey,
            'awsIv' => $awsIv,
            'awsContext' => $awsContext,
            'awsChallengeJS' => $awsChallengeJS // 可选但推荐
        ];
        // 注意：视觉CAPTCHA的任务类型通常是AntiAwsWafTask， 
        // 但传递的参数决定了CapSolver端的解决方案类型。
        $cookie = solveAwsWaf("AntiAwsWafTask", $params); 
    } else {
        echo("错误：未找到CAPTCHA的key、IV或context参数。\n");
    }
}

// 3. 使用令牌访问受保护资源
if ($cookie) {
    echo("成功获取aws-waf-token。发送最终请求...\n");
    
    $ch = curl_init($PAGE_URL);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    // 设置aws-waf-token cookie
    curl_setopt($ch, CURLOPT_COOKIE, "aws-waf-token=" . $cookie);
    
    $finalResponse = curl_exec($ch);
    curl_close($ch);
    
    echo "\n--- 最终页面内容 ---\n";
    echo $finalResponse;
    echo "\n--------------------------\n";
} else {
    echo("未能解决AWS WAF Challenge/CAPTCHA。\n");
}

?>