Castle.io Solver

const cuid = crypto.randomUUID().replace(/-/g, '');

import uuid
cuid = uuid.uuid4().hex

import ("crypto/rand", "fmt")

b := make([]byte, 16)
rand.Read(b)
b[6] = (b[6] & 0x0f) | 0x40  // version 4
b[8] = (b[8] & 0x3f) | 0x80  // variant
cuid := fmt.Sprintf("%x", b)

$b = random_bytes(16);
$b[6] = chr((ord($b[6]) & 0x0f) | 0x40);
$b[8] = chr((ord($b[8]) & 0x3f) | 0x80);
$cuid = bin2hex($b);

curl -X POST https://castle.botwitter.com/generate-token \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d '{ 
    "cuid": "550e8400e29b41d4a716446655440000",
    "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)...",
    "country": "US",
    "sec-ch-ua": "\"Chromium\";v=\"131\", \"Google Chrome\";v=\"131\"",
    "public_key": "pk_AvRa79bHyJSYSQHnRpcVtzyxetSvFerx",
    "domain": "x.com"
  }'

// Response:
{ 
  "success": true, 
  "token": "eyJhbG...", 
  "cuid": "550e8400e29b41d4a716446655440000",
  "cuidGenerated": false,
  "domain": "x.com",
  "headers": {
    "sec-ch-ua": "\"Chromium\";v=\"131\", \"Google Chrome\";v=\"131\"",
    "sec-ch-ua-mobile": "?0",
    "sec-ch-ua-platform": "\"Windows\""
  }
}

// Generate random cuid
const cuid = [...Array(32)].map(() => 
  Math.floor(Math.random() * 16).toString(16)).join('');

const response = await fetch('https://castle.botwitter.com/generate-token', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Authorization': 'Bearer YOUR_API_KEY'
  },
  body: JSON.stringify({ 
    cuid, 
    userAgent: navigator.userAgent, 
    country: 'US',
    'sec-ch-ua': navigator.userAgentData?.brands?.map(b => `"${b.brand}";v="${b.version}"`).join(', ')
  })
});
const data = await response.json();

// Response: { success: true, token: "...", headers: { "sec-ch-ua": "...", ... } }

import secrets, requests

cuid = secrets.token_hex(16)
sec_ch_ua = '"Chromium";v="131", "Google Chrome";v="131"'

response = requests.post(
    'https://castle.botwitter.com/generate-token',
    headers={'Authorization': 'Bearer YOUR_API_KEY'},
    json={
        'cuid': cuid, 
        'userAgent': 'Mozilla/5.0...', 
        'country': 'US',
        'sec-ch-ua': sec_ch_ua
    }
)
data = response.json()

# Response: {"success": True, "token": "...", "headers": {"sec-ch-ua": "...", ...}}

import ("crypto/rand", "fmt", "net/http", "bytes")

b := make([]byte, 16)
rand.Read(b)
cuid := fmt.Sprintf("%x", b)
secChUa := `"Chromium";v="131", "Google Chrome";v="131"`

body := fmt.Sprintf(`{"cuid":"%s","userAgent":"Mozilla/5.0...","country":"US","sec-ch-ua":"%s"}`, cuid, secChUa)
req, _ := http.NewRequest("POST", "https://castle.botwitter.com/generate-token", bytes.NewBuffer([]byte(body)))
req.Header.Set("Authorization", "Bearer YOUR_API_KEY")
req.Header.Set("Content-Type", "application/json")

// Response: {"success": true, "token": "...", "headers": {"sec-ch-ua": "...", ...}}

$cuid = bin2hex(random_bytes(16));
$secChUa = '"Chromium";v="131", "Google Chrome";v="131"';

$response = file_get_contents('https://castle.botwitter.com/generate-token', false, stream_context_create([
    'http' => [
        'method' => 'POST',
        'header' => "Authorization: Bearer YOUR_API_KEY\r\nContent-Type: application/json",
        'content' => json_encode([
            'cuid' => $cuid, 
            'userAgent' => 'Mozilla/5.0...', 
            'country' => 'US',
            'sec-ch-ua' => $secChUa
        ])
    ]
]));
$data = json_decode($response, true);

// Response: ["success" => true, "token" => "...", "headers" => ["sec-ch-ua" => "...", ...]]