🍪 @faddlanndevv/cf-api

Cloudflare bypass API — ringan, self-hosted, jalan mulus di Termux. Tanpa API key. Tanpa headless browser. Tanpa ribet.

creator : Faddlan version : 1.0.0 modes : min | mid | max | auto

🎉 Selamat Datang

Hai! Selamat datang di @faddlanndevv/cf-api — server bypass Cloudflare yang bisa kamu jalankan langsung dari hp ((Termux) atau VPS kecil.

Server ini dibuat karena:

• API bypass CF publik sering down, rate limited, atau tidak jelas pemiliknya.
• Solusi populer (Playwright, Puppeteer) berat, tidak cocok di Termux.
• Banyak orang butuh view source, cookie, dan deteksi Turnstile tanpa harus bayar API key.

Jadi daripada tergantung API orang lain — yuk punya server sendiri.

✨ Kenapa Harus Dibuat?

| Alasan | Penjelasan | |---|---| | Privasi | Semua request lewat server kamu sendiri. Data tidak dikirim ke pihak ketiga. | | Gratis selamanya | Tidak ada API key, tidak ada langganan, tidak ada quota. | | Ringan | Cukup cloudscraper + axios + node-fetch. RAM ~40-70 MB. | | Termux-friendly | Jalan di Android via Termux + PM2. Hemat baterai. | | Tingkat bertingkat | Mode min / mid / max — pilih sesuai tingkat proteksi CF. | | Multi-fallback | Auto-coba cloudscraper → axios → node-fetch. Kalau satu gagal, ganti yang lain. | | Open source | MIT license. Baca, ubah, fork sesukamu. |

📦 Instalasi

Via npm (global)

npm install -g @faddlanndevv/cf-api

Server jalan default di http://localhost:8786.

Manual (clone / download)

git clone https://github.com/faddlanndevv/cf-api.git cd cf-api npm install npm start

Di Termux + PM2 (rekomendasi)

npm install -g pm2 cd cf-api pm2 start ecosystem.config.js pm2 save pm2 logs cf-api

🚀 Cara Pakai

1. Test Server Hidup

curl http://localhost:8786/health

Response:

{ "creator": "Faddlan", "status": "ok", "uptime": 123.45, "memory": "42MB", "node": "v24.18.0" }

2. Ambil HTML Source

curl -X POST http://localhost:8786/get-source
-H "Content-Type: application/json"
-d '{"url":"https://nowsecure.nl","mode":"auto"}'

Response:

{ "creator": "Faddlan", "status": 200, "url": "https://nowsecure.nl", "via": "min:cloudscraper", "mode": "min", "solved": true, "cfLevel": "low", "title": "nowsecure.nl", "source": "...", "length": 12568 }

3. Ambil Cookies + Headers

curl -X POST http://localhost:8786/waf-session
-H "Content-Type: application/json"
-d '{"url":"https://example.com"}'

4. Deteksi Turnstile (Minimal)

curl -X POST http://localhost:8786/solve-turnstile-min
-H "Content-Type: application/json"
-d '{"url":"https://forms.com/login","siteKey":"0x4AAA..."}'

5. Bypass Turnstile (Maximal)

curl -X POST http://localhost:8786/solve-turnstile-max
-H "Content-Type: application/json"
-d '{"url":"https://nopecha.com/demo/cloudflare","mode":"max"}'

🎚️ Mode Bypass

Mode Tool Cocok untuk Kecepatan min cloudscraper CF low (basic JS challenge) ⚡ Cepat mid cloudscraper + retry + UA rotate CF medium (managed challenge) 🚗 Sedang max mid + retry agresif + curl-impersonate CF high (interactive) 🐢 Lambat auto min → mid → max (fallback) Semua (default) Adaptif

Contoh Pakai Mode

Auto (default)

curl -X POST http://localhost:8786/get-source
-d '{"url":"https://nowsecure.nl","mode":"auto"}'

Paksa Min

curl -X POST http://localhost:8786/get-source
-d '{"url":"https://nowsecure.nl","mode":"min"}'

Paksa max (untuk target proteksi tinggi)

curl -X POST http://localhost:8786/get-source
-d '{"url":"https://nopecha.com/demo/cloudflare","mode":"max","retry":5}'

🔌 Endpoints

Method Path Deskripsi GET / Info API + creator GET /health Cek status server POST /waf-session Bypass WAF + ambil cookies POST /get-source Ambil HTML source POST /solve-turnstile-min Deteksi Turnstile POST /solve-turnstile-max Bypass Turnstile aggressive

Body Request

{ "url": "https://example.com", "mode": "auto", "proxy": "http://user:pass@host:port", "timeout": 45000, "retry": 3, "siteKey": "0x4AAA..." }

Semua field kecuali url opsional.

---

🧰 Client CLI: @faddlanndevv/cookie-cf

Biar lebih gampang, pakai client CLI-nya:

npm install -g @faddlanndevv/cookie-cf

Contoh

cookiecf source --url https://nowsecure.nl
cookiecf source --url https://nowsecure.nl --mode max
cookiecf waf-session --url https://example.com
cookiecf turnstile-min --url https://forms.com/login --sitekey 0x4AAA...
cookiecf turnstile-max --url https://nopecha.com/demo/cloudflare

Opsi

Flag Alias Deskripsi
--url -u Target URL
--sitekey -k Turnstile SiteKey
--proxy -p Proxy
--mode -m min / mid / max / auto
--api-url -a Base URL API
--timeout -t Timeout (ms)

---

📱 Deploy di Termux + PM2

Setup

pkg install nodejs
npm install -g pm2 @faddlanndevv/cf-api

mkdir -p ~/cf-api/logs
cd ~/cf-api
cf-api &

PM2 ecosystem.config.js

module.exports = {
  apps: [{
    name: 'cf-api',
    script: 'server.js',
    autorestart: true,
    max_memory_restart: '256M',
    env: {
      NODE_ENV: 'production',
      PORT: 8786,
      HOST: '0.0.0.0'
    }
  }]
};

Commands

```bash
pm2 start ecosystem.config.js
pm2 save
pm2 status
pm2 logs cf-api --lines 50
pm2 restart cf-api

Autostart Saat HP Reboot

Install Termux:Boot dari F-Droid, lalu:

mkdir -p ~/.termux/boot cat > ~/.termux/boot/start-cf-api.sh <<'EOF' #!/data/data/com.termux/files/usr/bin/sh termux-wake-lock export PM2_HOME=$HOME/.pm2 pm2 resurrect EOF chmod +x ~/.termux/boot/start-cf-api.sh

🌐 Akses dari HP/Laptop Lain

Cari IP Termux:

ifconfig 2>/dev/null | grep inet

Test dari device lain di WiFi sama:

curl http://192.168.1.100:8786/health

Mau akses dari luar WiFi? Pakai tunnel gratis:

pkg install cloudflared
cloudflared tunnel --url http://localhost:8786

Atau:

npm i -g ngrok
ngrok http 8786

🧪 Contoh Lengkap

URL="https://nowsecure.nl"
API="http://localhost:8786"

echo "=== health ==="
curl -sS $API/health | python3 -m json.tool

echo "=== get-source (auto) ==="
curl -sS -X POST $API/get-source \
  -H "Content-Type: application/json" \
  -d "{\"url\":\"$URL\",\"mode\":\"auto\"}" \
  | python3 -c "import sys,json; d=json.load(sys.stdin); print(json.dumps({k:d.get(k) for k in ['creator','status','mode','via','solved','cfLevel','length']}, indent=2))"

⚠️ Keterbatasan

CF Protection Level Contoh Status Low (basic JS) nowsecure.nl ✅ Bypass Medium (managed) Banyak situs ⚠️ Kadang bisa High (interactive) nopecha.com/demo ❌ Butuh browser Enterprise + Bot Mgmt Bank, CF sendiri ❌ Tidak bisa

Realistis: cloudscraper di server Node.js biasa mampu bypass ~80% situs CF. Sisanya butuh browser asli (Playwright) atau solver berbayar.

🤝 Kontribusi

git clone https://github.com/faddlanndevv/cf-api.git
cd cf-api
npm install
npm run dev

Pull request selalu terbuka. Laporkan bug di GitHub Issues.

📄 License

MIT © 2026 Faddlan (@faddlanndevv)

💖 Terima Kasih

Dibuat dengan sabar oleh Faddlan, di tengah malam, pakai Termux di HP.

Kalau package ini berguna, kasih bintang di GitHub atau share ke teman.

Semoga bermanfaat. 🍪

@faddlanndevv/cf-api · Cloudflare bypass · Termux friendly · Creator: Faddlan