用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/uphiago/recon-skills --skill stealth-browser-launch命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | stealth-browser-launch |
| description | Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass. |
| version | 1.1.0 |
| revision_date | "2026-07-25T00:00:00.000Z" |
| license | MIT |
| platforms | ["linux"] |
| compatibility | Requires curl, httpx, nuclei, python3 |
| tags | ["recon","stealth","browser","anti-bot","fingerprint","chromium","playwright"] |
| category | recon |
| related_skills | ["humanize-automation","tls-fingerprint-impersonation","http2-header-impersonation","proxy-geoip-automation"] |
Launch a patched Chromium binary with C++ source-level fingerprint modifications that bypass anti-bot detection. The binary spoofs canvas, WebGL, audio, GPU, screen, WebRTC, network timing, and automation signals at the binary level — not via JavaScript injection or config patches that break with Chrome updates. Passes Cloudflare Turnstile, reCAPTCHA v3 (0.9 score), FingerprintJS, BrowserScan, and 30+ detection sites.
terminal with python3 and pip.playwright installed: pip install playwright && playwright install-deps chromium.cloakbrowser[geoip] for automatic timezone/locale resolution from proxy exit IP.pip install cloakbrowser
python3 -c "
from cloakbrowser import launch
browser = launch()
page = browser.new_page()
page.goto('https://target.com')
print(page.title())
browser.close()
"
The binary auto-generates a random fingerprint seed per launch. No flags needed for basic stealth:
from cloakbrowser import launch
browser = launch(
headless=True,
proxy="http://user:pass@residential-proxy:port",
geoip=True, # auto-detect timezone/locale from proxy exit IP
)
page = browser.new_page()
page.goto("https://target.com")
# Standard Playwright API from here
page.locator("input[name='username']").fill("test")
page.locator("button[type='submit']").click()
browser.close()
Use a fixed fingerprint seed when revisiting the same target to appear as a returning visitor:
browser = launch(
proxy="http://user:pass@residential-proxy:port",
geoip=True,
args=["--fingerprint=42069"], # fixed seed = same fingerprint every launch
)
Some sites detect headless even with C++ patches. Run headed with a virtual display:
# Start virtual display
Xvfb :99 -screen 0 1920x1080x24 &
export DISPLAY=:99
browser = launch(
headless=False, # real rendering
proxy="http://residential-proxy:port",
geoip=True,
humanize=True, # human-like mouse/keyboard/scroll
)
Override specific fingerprint values to match a target environment:
browser = launch(stealth_args=False, args=[
"--fingerprint=42069",
"--fingerprint-platform=windows",
"--fingerprint-gpu-vendor=NVIDIA Corporation",
"--fingerprint-gpu-renderer=NVIDIA GeForce RTX 3060/PCIe/SSE2",
"--fingerprint-hardware-concurrency=16",
"--fingerprint-device-memory=16",
"--fingerprint-screen-width=2560",
"--fingerprint-screen-height=1440",
"--fingerprint-timezone=America/Sao_Paulo",
"--fingerprint-locale=pt-BR",
"--fingerprint-webrtc-ip=auto",
"--fingerprint-noise=false", # disable noise for FingerprintJS ML bypass
])
Maintain cookies and localStorage across sessions to bypass "first-visit" challenges:
from cloakbrowser import launch_persistent_context
ctx = launch_persistent_context(
"./target-profile",
headless=False,
proxy="http://residential-proxy:port",
geoip=True,
)
page = ctx.new_page()
page.goto("https://target.com")
# Session persists across restarts
ctx.close()
Run multiple browser identities from a single container using cloakserve:
docker run -d --name cloak -p 127.0.0.1:9222:9222 cloakhq/cloakbrowser cloakserve
from playwright.sync_api import sync_playwright
pw = sync_playwright().start()
# Each unique fingerprint seed spawns separate Chrome process with independent identity
b1 = pw.chromium.connect_over_cdp("http://localhost:9222?fingerprint=11111")
b2 = pw.chromium.connect_over_cdp("http://localhost:9222?fingerprint=22222")
# Full identity control via query params
b3 = pw.chromium.connect_over_cdp(
"http://localhost:9222?fingerprint=33333"
"&timezone=America/New_York&locale=en-US&platform=windows"
"&hardware-concurrency=4&device-memory=8"
)
# Each browser has independent cookies, localStorage, canvas noise
For aggressive sites (Kasada, Akamai) that check canvas emoji rendering:
apt install -y fonts-noto-color-emoji fonts-freefont-ttf fonts-unifont \
fonts-ipafont-gothic fonts-wqy-zenhei fonts-tlwg-loma-otf
For CreepJS font enumeration evasion, install Windows fonts:
# Copy from Windows machine: C:\Windows\Fonts\
mkdir -p ~/.local/share/fonts/windows
cp /path/to/windows/fonts/SegoeUI*.ttf ~/.local/share/fonts/windows/
fc-cache -f
# Then launch with:
browser = launch(args=["--fingerprint-fonts-dir=/home/user/.local/share/fonts/windows"])
| Flag | Default | What it controls |
|---|---|---|
--fingerprint=SEED | Random 5-digit | Master seed for canvas/WebGL/audio/fonts |
--fingerprint-platform | windows/macos | navigator.platform, UA OS, GPU pool |
--fingerprint-gpu-vendor | Auto | WebGL UNMASKED_VENDOR_WEBGL |
--fingerprint-gpu-renderer | Auto | WebGL UNMASKED_RENDERER_WEBGL |
--fingerprint-hardware-concurrency | 8 | navigator.hardwareConcurrency |
--fingerprint-device-memory | 8 | navigator.deviceMemory |
--fingerprint-screen-width | 1920/1440 | Screen width |
--fingerprint-screen-height | 1080/900 | Screen height |
--fingerprint-timezone | — | IANA timezone |
--fingerprint-locale | — | BCP 47 locale |
--fingerprint-webrtc-ip | — | WebRTC ICE IP (auto for proxy exit IP) |
--fingerprint-noise=false | true | Disable canvas/WebGL/audio noise |
--fingerprint-fonts-dir | — | Target platform fonts path |
--fingerprint-windows-font-metrics | — | Align font metrics to Windows (v148+) |
--fingerprint-storage-quota | Auto | Storage quota in MB |
--fingerprint-taskbar-height | 48/95/0 | Taskbar height spoofing |
page.wait_for_timeout() leaks CDP traffic that reCAPTCHA detects. Use time.sleep() instead.--fingerprint-noise=false can cause ML-based detection on FingerprintJS. Only disable noise when specifically blocked by it.headless=False) for maximum stealth on aggressive sites.browser_version= if you need reproducibility.https://browserscan.net — all 4 bot checks should show NORMAL.https://demo.fingerprint.com/playground — should not show "nodriver" or "bot" detection.https://antcpt.com/eng/information/demo-form/recaptcha-3-test-score.html — score should be ≥ 0.7.https://deviceandbrowserinfo.com — isBot should be false with 0 true flags.navigator.webdriver is false with page.evaluate("navigator.webdriver").humanize-automation — Human-like mouse/keyboard/scroll for behavioral bypass.tls-fingerprint-impersonation — TLS/JA4 fingerprint spoofing at the HTTP client level.http2-header-impersonation — Browser-specific HTTP/2 pseudo-header ordering and SETTINGS frames.