Our solution automates reese84
payload generation, providing seamless access to Incapsula-protected websites with minimal latency.
#
Bypassing Incapsula Protection: Step-by-Step
- Load website: Load website with a valid browser environment and identify the Incapsula script.
- Payload Generation: Utilize our API to generate a valid
reese84
payload. - Post payload: Post the generated payload to receive the authenticated
reese84
cookie, granting access to the protected resource.
#
Application resources
Endpoint: https://imperva-incapsula-reese84.p.rapidapi.com
This endpoint enables the client to interact with Incapsula payload generation.
#
Authentication Headers
Content-Type: application/json
X-RapidApi-Key: <api key>
- get your API key from Rapidapi.com
#
1. How to identify Incapsula script
After accessing the target website, open your browser’s inspector tools and navigate to the network tab. You should see a request (POST) sent to a URL similar to:
https://example.com/some-random-words-here?d=www.example.com
This is the script tag. Each response should return JSON data containing a key named "token".
#
2. Generating the payload
Once the reese84
script is identified and loaded, send its URL to our API to generate the appropriate payload for the cookie generation POST request.
POST
https://imperva-incapsula-reese84.p.rapidapi.com/solve
#
Request:
const url = 'https://imperva-incapsula-reese84.p.rapidapi.com/solve';
const options = {
method: 'POST',
headers: {
'Content-Type': 'application/json',
'X-RapidAPI-Key': 'YOUR KEY',
'X-RapidAPI-Host': 'imperva-incapsula-reese84.p.rapidapi.com',
},
body: {
// pass script URL from your website
scriptUrl: 'https://www.ticketmaster.de/epsf/eps-d',
userAgent: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36'
}
};
try {
const response = await fetch(url, options);
const result = await response.text();
console.log(result);
} catch (error) {
console.error(error);
}
curl --request POST \
--url https://imperva-incapsula-reese84.p.rapidapi.com/solve \
--header 'Content-Type: application/json' \
--header 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36' \
--header 'X-RapidAPI-Key: FILL_YOUR_API_KEY_HERE' \
--data '{ "scriptUrl": "https://www.ticketmaster.de/epsf/eps-d"}'
import requests
url = "https://imperva-incapsula-reese84.p.rapidapi.com/solve"
payload = {
"scriptUrl": "https://www.ticketmaster.de/epsf/eps-d",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
}
headers = {
"Content-Type": "application/json",
"X-RapidAPI-Key": "YOUR KEY",
}
response = requests.post(url, json=payload, headers=headers)
print(response.json())
#
Response:
{
"payload": {
"solution": {
"interrogation": {
"p": "/xDXRQ4tCmcM+SQWA98I6f3AOvIhGQUA6W4K8Ab8Gvw+/EsE...",
"st": 1730279221,
"sr": 111513655,
"cr": 612670446,
"og": 1
},
"version": "beta"
},
"old_token": null,
"error": null,
"performance": {
"interrogation": 280
}
}
}
#
3. Send Payload to origin host
After receiving the payload
object, send it back to the origin server using the POST method. Append ?d=www.example.com
to the URL.
#
3. Ensuring Successful operation
Our API generates the necessary payload for the reese84
cookie. Your responsibility includes:
- Handling the subsequent POST request to the website
- Managing all further interactions with the website to complete the cookie retrieval process.
To ensure seamless navigation and payload posting:
- Utilize HTTP/2 as the protocol
- Provide a valid set of request headers that accurately mimic those of a legitimate browser, facilitating successful interaction with the website.