Amazon WAF CAPTCHA

AWS WAF answers suspicious requests with a CAPTCHA challenge on the page itself: the visitor solves a puzzle and the site lets the request through with a token. You see it on stores, download areas and account pages that are protected by Amazon Web Services.

EndCaptcha solves these challenges through the same API as every other CAPTCHA type. You send the challenge values from the protected page, poll for the result and receive a token, and then your page submits that token so the request passes.

Amazon WAF CAPTCHA challenge asking the visitor to slide an image to complete a pyramid
The challenge a visitor meets on a protected page: move the piece into place and submit, and the page receives the token that you pass through the API.

What you need from the target page

  • Key - the key value inside the script that renders the challenge on that page.
  • Page URL - the full address where the challenge appears, including its path.
  • iv - the iv parameter of that same script.
  • context - the context parameter of that same script.
  • Proxy - optional but recommended, HTTP proxies only, so the address that solves the challenge and the address that submits the form match.

Solve it through the API

  1. Submit with type=16 to http://api.endcaptcha.com/upload.
  2. Poll the returned id every 3 seconds.
  3. Take the token and submit it where the protected page expects it, next to the challenge it belongs to.

The full parameter list, an example and the error table live on the Amazon WAF API guide.

What it costs

WAF challenges are charged in credits like every other CAPTCHA, and some types cost more credits than others. The packages and their credit prices are on the pricing block of the home page, and a challenge that solved incorrectly is not billed when you report it.

Amazon WAF questions

Where do the key, iv and context come from?
All three live in the script that renders the challenge: the key parameter of that script, and its iv and context parameters.

Which proxies are supported?
HTTP proxies only, and only when you send them with the payload.

How long does a solve take?
Poll every 3 seconds until the token arrives. The home page publishes a seven second service level agreement for the service.

Sign Up

Create Account

Already have an account? please
Login
Terms Of Services

Terms of Services

EndCaptcha Terms of Service:

EndCaptcha is a Data Entry Company that focuses on fast and reliable conversion of Images to Text and general digitization. Any use of the service for activities that are deemed illegal is strictly prohibited.

EndCaptcha is not responsible for the actions of its clients. Any complaint about any particular EndCaptcha client should be reported to [email protected]. EndCaptcha reserves the right to suspend its clients' account if, through an [email protected] report, gets hold of undeniable proof that the client is engaging in illicit activities.

EndCaptcha reserves the right to change at any time its Terms of Service, prices of packages, Service Level Agreement conditions and compensation, and Unsupported Images without prior notice.

Unsupported Activities:

EndCaptcha reserves the right to terminate any client account without notice if, by its sole judgement, EndCaptcha determines that the client is engaged in activities that negatively affect service levels. Examples of these harmful activities are:
- Using EndCaptcha's API in ways that negatively affects the operation of the service
- Constantly submitting images that are unreadable
- Exploiting in any way the Service Level Agreement compensation
- Exploiting the service function used to claim images as incorrectly solved

Ownership of an EndCaptcha account:

All accounts created in EndCaptcha remain as sole property of EndCaptcha, and its parent company. Sharing account details, selling and reselling accounts, and selling awarded coupons is prohibited. Violation of this policy will result in account suspension.

Service Level Agreement:

Even though customers may submit Unsupported Images, and EndCaptcha will do it’s best effort to solve said images in a timely fashion, the Service Level Agreement won't cover any Unsupported Images and won't be available during dates included in the Maintenance and Holidays Calendar. EndCaptcha reserves the right to include Unsupported Images at any time without previous notice.

Additional information about the types of insurances provided in the Service Level Agreement may be found here.

Refunds and Chargebacks:

Any fulfilled claims for chargebacks before consulting our helpdesk will result in an immediate suspension of the clients account and appropriate legal action (fraud).

Refunds are processed in a case-by-case basis. We will not award refunds if:
- The client is unsatisfied with the results obtained when submitting Unsupported Images.
- The client has partially used the service and has no use for remaining balance in the client's account.
- The client was unaware of any explicitly written service constraints before making a purchase.

If a refund is awarded, the client will receive funds equivalent to the remaining credit balance in the client's account.

Maintenance and Holidays Calendar

Maintenance and Holidays Calendar

Although we will try our best to keep maintenance and undercapacity occurrences to a minimum, there will be rare occasions in which these events will be unavoidable, and thus not covered by the Insurances of our Service Level Agreement. The Maintenance and Holidays Calendar will show the foreseeable events of diminished Quality of Service.

Event Description Date Duration
Unsupported Images

Unsupported Images

The following images can be solved by our team of workers, but are not insured by the Slowness Insurance. These images are usually unreadable, math problems, or have a lengthy amount of characters. The same exception applies for the Recaptcha V2 challenges. Due to their complexity, are not eligible for Slowness Insurance


Recaptcha V2 Fast Solving Service Recaptcha Invisible Decoding Solution
Refunds and Chargebacks

Refunds and Chargebacks

Any fulfilled claims for chargebacks before consulting our helpdesk will result in an immediate suspension of the clients account and appropriate legal action (fraud).

Refunds are processed in a case-by-case basis. We will not award refunds if:
- The client is unsatisfied with the results obtained when submitting Unsupported Images.
- The client has partially used the service and has no use for remaining balance in the client's account.
- The client was unaware of any explicitly written service constraints before making a purchase.

If a refund is awarded, the client will receive funds equivalent to the remaining credit balance in the client's account.

Service Level Agreement

Service Level Agreement

EndCaptcha offers a unique Service Level Agreement that compensates its users when there is a drop in Quality Standards.

About Compensation

Users will be compensated with Compensatory Credits, which will be deposited once the currently used Credit Package has been consumed. The amount of Compensatory Credits will be calculated depending on the type of Insurance and the Compensation Coverage Level of the currently used package.

Compensatory Credits, Promotional Credits, and Free Credits won't be subject to the terms of the Service Level Agreement and its insurances.

Compensation Coverage Level

The user will be given a Slowness Insurance and an Outage Insurance. These types of insurances will provide compensation to users whenever certain Quality Standards are not met. There will be different Compensation Coverage Levels depending on what Credit Package was bought. The amount of Compensatory Credits will be the result of multiplying the Compensation Coverage Level percentage with the amount of quantifiable times the Quality Standards are not met.

Slowness Insurance

*Approximately 70% of all images are decoded with-in 7-8 seconds on average. The remainder is also guaranteed to be decoded with-in 11 seconds max. For any images that take longer than 11 seconds to solve, our slowness insurance policies kick in.

The Slowness Insurance will provide compensation to EndCaptcha users for images that are getting typed in more than 11 seconds. The compensation will be calculated on an Image-by-image basis.

Example Case:
Compensation Level: 60% Coverage
Images over 11 seconds: 2,000
Compensation Credits: 1,200

The Slowness Insurance won't cover Unsupported Images, and is not applicable during the time ranges included in the Maintenance and Holidays Calendar.

Outage Insurance

The Outage Insurance will provide compensation to EndCaptcha users when the service suffers from an unexpected outage that renders the service partially or completely unresponsive. The Outage Insurance will only cover cases of registered server problems on EndCaptcha's side, it will not cover issues in the user's side or connectivity problems between the user and EndCaptcha.

The Outage Insurance will only compensate credits in accordance with the usual activity of the users during the event. The usual activity of the user will be determined by the average past submissions made by the user during the weekday and time of the outage event.

Example Case:
Compensation Level: 100% Coverage
Usual Activity During Event: 2,000 Images
Compensation Credits: 2,000 Images

The Outage Insurance will be evaluated on a case by case basis whenever the user opens an outage claim at [email protected]. For outage claims to be valid, they have to be opened with-in 72 hours of the outage occurring.

The Outage Insurance is not applicable during the Maintenance time ranges included in the Maintenance and Holidays Calendar, which have been announced a minimum of 12 hours in advance. The Outage Insurance is not applicable when deliberate attacks to our service are made.

EndCaptcha reserves the right to change its Service Level Agreement without prior notice.