untidetect-tools

Curated anti-detect tools list

Just making a tools list for my project, feel free to send pull requests :) While looking around, it may be a good idea to sign up on all the Discord channels each product has to find some interesting insides from users.

✳️ checkout new Proxy Providers List and tell me if its sucks or star it if its useful

😊 - automation supported on free plan 🙄 - not supported

Anti-detect browsers

• Gologin - 3 free for 1 month, $24 for 100 profiles, no unlimited plan, free proxies 🙄
• NullPrint - starts $9/month for 20. Emulates Android Phone (Tested fingerprint and Turnstile)
• Undetectable - 5 cloud profiles free, $49 for unlimited local with 25 "configs", 1 additional config $1 (API + driver automation) 🙄
• Multilogin - starts from €74 for 100 profiles
• Incogniton - 10 free for 2 months then 3 only, $29.99/Month for 50 🙄
• AdsPower - 2 profiles free, $5.4 for 10 profiles, no unlimited plan 🙄
• Morelogin - 2 free, $9 for 10 profiles and 2 users 😊
• Dolphin-anty - 5 free, $89 for 100 😊
• RoxyBrowser - 5 free, $0.03-0.8 profile, offers free Netflix
• Octo Browser - starts from €21 for 10
• Kameleo - starts €59/user with unlimited profiles
• Vmlogin - $99 for 200 profiles
• Indigo - €99 for 100 profiles
• GhostBrowser - 4 profiles free, $21 unlimited ?
• Bablosoft - free browser automation studio, for Puppeteer look at puppeteer-with-fingerprints, the only browser as I know that supports faking canvas (with PerfectCanvas. If you need a code for your website to generate own canvases I can sell you it. Then you can add it to your fingerprints (Their PerfectCanvas is very slow and you can get only 30-40 per day, otherwise you will need to buy CustomServer) 😊
• ixBrowser - free 10/created a day, but doesn't mask everything (for example, no GPU masking) 🙄
• Gpmlogin - didn't check it yet, pricing is for unlimited use, for 1pc it is $125
• VektorT13 - anti-detect based on virtual machines
• Wade - from $30/month, automation from $160 🙄
• Camoufox - launched via Python, based on Firefox 😊
• Hexium Browser - Playwright launch() + patched Chromium 151 (C++ personas, no JS injectors). Linux x86_64 alpha, PyPI hexium-browser, AGPL 😊
• BitBrowser - 10 free, 50/$9, antidetect from Hong Kong 😊
• NSTBrowser - 30 profiles open/day free, $29(299) for 3000 open profiles per day, quite new on the market 😊

Not checked yet:

• ShardBrowser
• DonutBrowser - unlimited local
• DashNull - 10 free, $50 for unlimited profiles, free proxies, no fingerprint edit, but supports VPN 🙄
• CloakBrowser - not recent core free, $19+ Multizen profile manager for cloak
• HideMyAcc - 7 days free, $5 for 5 profiles
• LightPanda - not anti-detect, but fast browser for scraping 😊
• Whologin - free plan has unlimited profiles but no automation. paid - $89/everything 🙄
• PotaBrowser - patched chromium
• ChromePowerApp - chinese multiaccounter (but fingerprints are weak, cant change screen, fonts, GPU) 😊
• 0detect - 5 free, 50/$14, automation from $111 🙄
• ADBLogin - The First anti-detect browser free forever
• LinkenSphere - $30+/month. One of people found hidden process that it runs, can anyone confirm it?
• DisCloak - 5 free, $8/50 profiles

Useless:

• AntBrowser - too many lies detected by CreepJS
• Switch Antidetect - using Chrome 103 while 120 is out. Too slow updates.
• GhostBrowser - only user-agent switch, easily fingerprinted
• MarketerBrowser - can't even switch user-agent without detection

A bit old article on how anti-detect browsers can be detected. Example from the article: if( Object.getOwnPropertyNames(navigator)[0] ) alert('fake parameters detected');

Detection tests

Everything:

• Fingerprint.com - bot detection from fingerprint.com
• Creep JS - advanced fingerprint information
• Pixelscan - simple fingerprint checker
• F.vision - old f.vision
• Coveryourtracks - test to see if you are protected from fingerprinting
• AmIUnique Fingerprint - see your fingerprint
• Sannysoft Fingerprint - check your fingerprint
• BrowserLeaks - many different fingerprint checks
• Audio fingerprint - audio
• WebbrowserTools - many tools to check fingerprint
• My own tool - the only benefit the code is plain, so you can find very easily how everything is tested.
• BrowserScan

Automation:

• Rebrowser-bot-detector - interesting test where you have to do some automation tasks and it will try to detect you
• Brotector - most advanced detector, even crushes automation on detect
• Behavioral Bot Classification
• BotChecker - currently offline, send me pull or message when fixed pls
• Pixelscan Bot detector - false positive Firefox inside kvm MacOS

Canvas:

• Canvas inspector - helps to detect scripts on website that draw canvases & audio
• Canvas Tampering Detection

Captcha scoring:

• ReCaptha score - see you reCaptcha score
• Cloudflare captcha - check if you are passing the captcha

Connection:

• ProxyDetect - Proxy/VPN detection (implementing NikolaiT/zardaxt lib below)
• IPRoyal WebRTC leak - WebRTC leak detection
• BrowserLeaks WebRTC leak - WebRTC leak detection
• NikolaiT/zardaxt - Passive TCP/IP fingerprinting
• ipQualityScore - checking your IP reputation and other stuff. Real Russian IPs and many other detected as VPN thou LOL. Has API
• FingerBank - API for checking TCP fingerprints by signature (Ja3 can get here)
• DnsLeakRest - DNS leak test
• BrowserLeaks DNS leak - DNS leak test

Offline:

• Extension-detector

Not recommended:

• Iphey - basic, doesn't detect basic VPN btw
• FpTing - made by students for a study paper, lacks maintenance, and provides some incorrect data (e.g., 5 falsely detected lies for my Firefox on Linux).

More tools can be found at https://github.com/kkoooqq/fakebrowser

Anti-detect libs

• Firefox-Stealth - 15 C++ patches against mozilla-central (Firefox 150.0.1) that change fingerprint at the source level (Canvas, WebGL, Fonts, Audio, WebRTC, Timezone). MPL-2.0.
• Privacy Manager - 12 modules to change fingerprint of your computer.

For Puppeteer:

• Rebrowser - isolated environment
• Secure-puppeteer - isolated environment, outdated, so XPath and some feautures doesnt work
• Extra stealth - trash, as easily detected by CreepJS
• Fingerprints from Bablosoft - free and paid fingerprints to use
• Perfect Canvas from Bablosft - emulating real canvas data
• MouseEvent-Patcher - patches .screenX and .screenY
• Imposter - my package that emulates human actions on the page, currently in development, join me :)

For Playwright:

• Rebrowser - isolated environment
• Playwrigh-ghost - Playwright with plugins to be a ghost
• Invisible-Playwright - Patched Firefox 150 + Playwright wrapper, MIT licensed, self-hosted. Spoofing at the C++ level (no JS injection).
• Hexium Browser - Patched Chromium 151 + Playwright wrapper, AGPL, self-hosted. Spoofing at the C++ level (no JS injection). Linux x86_64 alpha. 😊

For Selenium/Python:

• NoDriver - successor of Undetected-chromedriver
• ZenDriver - fork of NoDriver
• Undetected-chromedriver - outdated
• Pyautogui - control the mouse and keyboard to automate interactions with other applications
• Selenium-Driverless - use selenium without chromedriver

For request libs:

• Curl-impersonate
• For GO
• CycleTLS for NodeJS/GO
• curl_cffi for Python
• Got-Scraping for NodeJS

Other:

• NutJs - JS OS level automation, use package @nut-tree-fork for precompiled binaries

Chrome launch arguments:

• --profile-directory=${dir_name} // should be together with userDataDir
• --accept-lang=en,en-US, // th,en,en-GB,en-US works only on new profile dirs
• --user-agent=${user_agent} // properly changes user-agent in headers and JS runtime
• --disable-extensions-except=${EXTENSION_PATH}
• --load-extension=${EXTENSION_PATH}
• --disable-site-isolation-trials helps to detect all iframes on the page for Puppeteer, without it frames from another domain will be inaccessible
• --aggressive-cache-discard // useful in case u want more time for a debugger to attach or an extension to modify something
• --disable-gpu // less detectable canvas fingerprint, but GPU vendor/renderer still will be present

Humanizing

• Fake-browser Based on Puppeteer, with human-like interactions
• Bezier mouse movements
• Definitely-not-a-robot
• Puppeteer-Humanize
• Ghost-Cursor - generate realistic, human-like mouse movement data between coordinates
• HumanCursor - A Python package for simulating human mouse movements

Captha solvers

• List of everything related to Captchas

SMS confirmations

• HeroSMS
• SmsBower - min top up $2.86, low commission
• OnlineSim - very expensive
• VakSms - not every country is available
• GrizzlySms
• 365sms - top up from $1
• Cyberyozh - virtual + residential, expensive
• 5Sim - expensive for some countries but has activation rate data available (Thailand for example)
• Get SMS Online - only USA numbers, top up from $5, rate from $0.10. Free numbers available for testing.
• SMSPool - a little expensive depending on services but accepts card payments, min top up $10

Proxies

List of proxy providers - 25+ proxy providers with price comparison List of mobile proxies - including many small providers

• BrightData - around $8/GB
• DataImpulse - from $1/GB (has $5/5Gb welcome package, but normally top-up is $50+). IMAP/SMTP blocked.
• WebShare - $6/Gb (from 4.5), IPs: from $6/month per 20 (shared). IMAP/SMTP works.
• Thordata - from $1.8/Gb residential, mobile from $2.2
• GeoNode - $3/Gb (from $0.45)
• Soax - starts at $6.6/GB and less

Shops

Hm. Cant get it right? You can always shortcut:

• AccsMarket - en/ru, crypto
• DarkStore - ru lang, crypto / local russian bank payment

Many other stuff can be found at BlackHatWorld but usually more expensive.

Other

• Script to collect visitors' fingerprints on your website.
• Article How to bypass “slider CAPTCHA” with JS and Puppeteer
• Library of research papers and presentations for counter-detection and web privacy
• CPU fingerprinting gives a model of the CPU with 60% accuracy
• How to bypass PerimeterX
• Article BotOrNot
• Your request fingerprint

Antidetection tips

Browser - use separately downloaded version of Chrome instead of Chromium, and pass it in executablePath in Puppeteer.

• Screen width/height + Window height/width - can be emulated by attaching a debugger via Chrome extension, but screen.availHeight and width will be wrong. So, it is better to change screen size on a virtual machine or use an anti-detect browser.
• Disable WebRTC when using proxies/mask public IP: https://github.com/puppeteer/puppeteer/issues/6377
• Match all proper browser headers in the same order
• Autocontext api https://habr.com/ru/companies/globalsign/articles/475586/ https://fb-killa.pro/threads/povyshaem-svoju-anonimnost-putem-kontrolja-nad-audiocontext-fingerprint.2759/#post-19349
• Make sure nothing of your scripts if visible in global score, some websites collect all data (like window.*) and analyze it
• Did you know if you go directly on the website without googling it it will be visible by using window.history.length?

What is available in a JS worker:

Worker is another sneaky way to detect real browser data, as you can't modify object properties in it with some extension. window, screen, and access to DOM are not available (and therefor canvas)

• Timezone ( Intl.DateTimeFormat().resolvedOptions().timeZone )
• Language ( navigator.language || navigator.userLanguage )
• User agent ( navigator.userAgent )
• Hardware Concurrency ( navigator.hardwareConcurrency )
• GPU data (except Linux & Firefox upd 30.01.2024)