Skip to content

🤖 Cross-platform browser for automation testing: Cloudflare, Akamai, Kasada, Shape, DataDome, PerimeterX, hCaptcha, FunCaptcha, Imperva, reCAPTCHA, ThreatMetrix, Adscore

License

Notifications You must be signed in to change notification settings

botswin/BotBrowser

Repository files navigation

🤖 BotBrowser

Professional Cross-Platform Browser with Unified Fingerprint Technology 🚀

Identical fingerprints on any OS • Cross-platform compatibility • Validated against 30+ detection systems for research benchmarking

Latest Release Commit Activity Issues GitHub Forks GitHub Stars

BotBrowser GUI - Your Command Center

📖 What Is BotBrowser?

BotBrowser delivers identical browser fingerprints across all platforms. Run the same profile on Windows, macOS, or Linux — get the exact same fingerprint every time.

Designed for automation testing, cross-platform compatibility validation, and maintaining consistent browser environments in authorized research and defensive benchmarking settings. Review the project Legal Disclaimer and Responsible Use Guidelines before using the software.


🏆 Why BotBrowser

What makes BotBrowser different: Cross-platform browser with unified fingerprint technology — identical fingerprints everywhere

Core Advantages Technical Excellence
High-fidelity Profile Simulation - Synthetic/aggregated profiles for realistic, policy-compliant testing Latest Chromium Base - Always synced to newest stable Chrome for zero fingerprint drift
Zero-Config Intelligence - Auto-detects timezone/locale/language from IP Advanced Programmatic Control - Playwright/Puppeteer integration with CDP leak blocking

📱 Cross-Platform Fingerprint Consistency

Unified fingerprints: Identical browser fingerprints across all platforms (Windows, macOS, Android) ensuring consistency regardless of host system.

Automatic touch simulation, device metrics, and unified fingerprint rendering across platforms.

Desktop → Android Test Results:


🚀 Getting Started

Quick Start

Step 1: Download

Step 2: Launch (⚠️ use absolute paths)

Windows:

chrome.exe --no-sandbox --bot-profile="C:\\absolute\\path\\to\\chrome139_win11_x64.enc" --user-data-dir="%TEMP%\\botprofile_%RANDOM%"

macOS:

/Applications/Chromium.app/Contents/MacOS/Chromium --no-sandbox --user-data-dir="$(mktemp -d)" --bot-profile="/absolute/path/to/chrome139_win11_x64.enc"

Ubuntu:

chromium-browser --no-sandbox --user-data-dir="$(mktemp -d)" --bot-profile="/absolute/path/to/chrome139_win11_x64.enc"

Step 3: Test Visit CreepJS to see fingerprint consistency in action!

🌍 Works instantly — timezone and locale auto-detected from your IP

📖 Complete Installation Guide →

Minimal Playwright Example

const browser = await chromium.launch({
  headless: true,
  executablePath: BOTBROWSER_EXEC_PATH,
  args: [`--bot-profile=${BOT_PROFILE_PATH}`],
  '--proxy-server="socks5://usr:pwd@127.0.0.1:8989"',  // or: "http://usr:pwd@127.0.0.1:8989"
});
const page = await browser.newPage();
await page.addInitScript(() => { delete window.__playwright__binding__; delete window.__pwInitScripts; });
await page.goto('https://abrahamjuliot.github.io/creepjs/');

Notes:

  • Use --user-data-dir with a unique temporary folder to avoid conflicts with running Chromium instances
  • Prefer --proxy-server or per‑context proxies; auto timezone/locale detection applies in both cases
  • Avoid framework‑specific proxy/auth options (e.g., page.authenticate()), which bypass BotBrowser geo detection

Examples: PlaywrightPuppeteer

More options:

🛠️ Advanced Capabilities

Professional-grade browser technology through sophisticated multi-layer fingerprint consistency and cross-platform compatibility systems

Coverage Map — Detection Surfaces → Capabilities → Evidence

This map links common detection surfaces to BotBrowser capabilities and the exact docs/tests where they are demonstrated.

Detection Surface Capability Evidence
navigator.webdriver Removed/hidden at engine level ADVANCED_FEATURES#Chrome Behavior Emulation
JS Execution Isolation CDP/WebDriver artifact blocking ADVANCED_FEATURES#Playwright/Puppeteer Integration
Canvas/WebGL/WebGPU/Audio/Text metrics Deterministic noise + parameter controls and cross‑worker consistency ADVANCED_FEATURES#Graphics & Rendering Engine
Fonts/Text Built-in fonts + HarfBuzz shaping ADVANCED_FEATURES#Cross-Platform Font Engine
MediaDevices Profile-based device spoofing Profile Configs
WebRTC SDP/ICE manipulation, candidate filtering ADVANCED_FEATURES#WebRTC Leak Protection
Proxies/Geo Per-context proxy + auto timezone/locale CLI_FLAGS#Enhanced Proxy Configuration
UA Congruence Brand + full-version alignment CLI_FLAGS#Profile Configuration Override Flags
Headless Parity GPU/WebGPU/media signals stable ADVANCED_FEATURES#Headless & Incognito Compatibility
DNS Leaks SOCKS5 DNS-through-proxy ADVANCED_FEATURES#Enhanced Proxy System
HTTP Headers Chrome-like headers, HTTP/2/3 behavior ADVANCED_FEATURES#Chrome Behavior Emulation
TLS Fingerprint JA3/JARM/ALPN control (Roadmap) CHANGELOG

Core Technology Arsenal

  • Multi‑Layer Consistency: Canvas/WebGL/Text metrics with low‑level Skia/HarfBuzz tuning and targeted WebGL/WebGPU controls
  • Clean Automation: CDP/WebDriver hardening, Chrome‑like behavior, and framework‑less early hooks via --bot-script
  • Configurability: 30+ CLI overrides, per‑context proxies with automatic geo‑detection, and session tools (cookies/bookmarks/title)
  • Headless ↔ GUI Parity: Stable GPU/WebGPU/media signals and consistent behavior across browser modes
  • Performance Controls: Precise FPS simulation, memory/storage timing, and GPU micro‑benchmarks for realistic profiles
  • Focus & Session Control: Always-active tab emulation, configurable WebRTC ICE servers, and expanded media decoder reporting for authentic runtime signals

Fingerprint Consistency Matrix — Cross‑Platform Coverage

Category Sample Capabilities
Graphics Canvas/WebGL rendering, GPU micro-benchmarks, texture hash configuration
Network WebRTC SDP configuration, proxy auth, connection management
Platform Font fallback chains, cross-worker consistency, OS-specific features
Performance FPS simulation, memory timing, animation frame optimization

📖 Complete Advanced Features Documentation →


⚙️ Configuration & Profiles

📢 BotBrowser combines synthetic/aggregated profiles with flexible configuration for authorized research. Profile consistency and CLI settings enable comparative analysis.

Key Concepts

  • Profile Foundation: Synthetic/aggregated profiles provide realistic fingerprint data for authorized testing
  • CLI Flexibility: Override profile settings at runtime without modifying encrypted files
  • Cross-Platform Compatibility: A macOS profile works on Ubuntu; a Windows profile works on macOS; an Android profile can be fully emulated on any OS
  • Auto-Configuration: Timezone, locale, and languages automatically detected from IP/proxy

Configuration Options

⚠️ Note: This project must only be used in environments you own or where you have explicit authorization. Use against third-party services without permission is strictly prohibited.


🖥️ BotBrowserConsole (GUI Tool)

For users who prefer a graphical interface, BotBrowserConsole provides a user-friendly way to manage BotBrowser:

Features:

  • Select profiles and start browsing without command line
  • Launch multiple browser instances easily
  • Manage different environments and accounts
  • User-friendly interface

🎯 Research Validation

Academic Research Overview

Our compatibility research examines browser fingerprinting techniques across different client configurations to improve web compatibility and understand fingerprint consistency.

Test Results

⚠️ Research demos in authorized environments. See DISCLAIMER.

Anti-Bot Systems:

Service Technology Results
Cloudflare Turnstile, Bot Management ▶️ Turnstile Demo
DataDome ML-based detection ▶️ PayPal Test
PerimeterX Behavioral analysis ▶️ Zillow Demo

Fingerprinting Systems:

Service Focus Results
CreepJS Comprehensive fingerprinting ▶️ Desktop Test | ▶️ Android Profile
FingerprintJS Pro Commercial fingerprinting ▶️ Bot Detection
Pixelscan Detection suite ▶️ Comprehensive Scan

Cross-Platform Validation

  • Windows Profile on macOS: Fingerprint consistency maintained
  • Android Emulation on Desktop: Complete mobile API simulation
  • Headless vs GUI Mode: Identical fingerprint stability

📖 Complete Validation Results & Research Data → - 30+ anti-bot systems, 15+ fingerprinting tools, statistical analysis


📚 Resources & Support

Documentation

Document Description Content Preview
Installation Guide Platform-specific setup Windows/macOS/Ubuntu guides, Docker deployment, troubleshooting
Advanced Features Technical capabilities 30+ CLI flags, noise injection, GPU micro-benchmarks
Validation Results Research data 30+ anti-bot systems, 50,000+ test sessions, statistical analysis
CLI Flags Reference Command-line options --bot-config-* flags, proxy auth, session management
Profile Configuration Profile customization Fingerprint control, cross-platform compatibility
BotCanvasLab Canvas forensics tool Canvas 2D recording, JSONL event viewer, replay roadmap
Examples Code samples Playwright, Puppeteer, bot-script automation

Quick Access

Framework Integration:

Profile Management:

Support Channels

Contact Method Best For Link
📧 Email Technical questions, source code access botbrowser@bk.ru
📱 Telegram Community support, quick questions @botbrowser_support

Building from Source

For advanced users who want to build BotBrowser from source:

  1. Requirements: Linux build environment, Chromium build tools
  2. Source Access: Available to qualified researchers and institutions

Contact botbrowser@bk.ru for source code access and compilation instructions.

Debugging & FAQs

Issue Platform Solution
STATUS_ACCESS_VIOLATION Windows Add --no-sandbox flag when launching
"Chromium" is damaged macOS Run xattr -rd com.apple.quarantine /Applications/Chromium.app
Missing dependencies Ubuntu Run sudo apt-get install -f
Profile file permission errors All Ensure .enc file has read permissions (chmod 644)
BotBrowser won't start or crashes All Check that your OS and Chromium version match the build; update BotBrowser to the latest release

🛡️ Responsible Use

  • Review the detailed Responsible Use Guidelines and Legal Disclaimer before requesting binaries or premium profiles.
  • Maintain written authorization for every environment you test, and record the synthetic data sets you rely on.
  • Contact the maintainers at botbrowser@bk.ru if you observe suspicious activity or need to report an abuse incident.

📋 Legal Disclaimer & Terms of UseResponsible Use Guidelines — BotBrowser is for authorized fingerprint-consistency testing and research only.