Stealth profile consistency (#269)
* feat(stealth): randomize browser profile per session Add a pool of 8 realistic browser profiles (Win10/Win11/macOS, Chrome 143-146). One is picked randomly per BrowserContext instead of always advertising Linux, which is a strong bot signal. Each profile keeps navigator.platform, userAgentData.platform, and userAgentData.platformVersion internally consistent with the UA string. - profiles.rs: static PROFILES pool + random_profile() picker - context.rs: pick profile on construction, store platform fields - page.rs: call rt.set_platform() alongside rt.set_user_agent() - runtime.rs: add set_platform() to inject __obscura_platform globals - bootstrap.js: read platform/userAgentData from globals (default Win32) Co-Authored-By: Claude Sonnet 4.6 <[email protected]> * feat(stealth): match GPU renderer pool to OS profile Windows profiles get ANGLE Direct3D11 renderers; macOS profiles get ANGLE Metal renderers. Vendor strings updated to match (Google Inc. (Apple) for Apple Silicon/Intel Mac, Google Inc. (NVIDIA/AMD/Intel) for Windows). Co-Authored-By: Claude Sonnet 4.6 <[email protected]> * fix(stealth): navigator.webdriver returns false instead of undefined Browsers set navigator.webdriver to false when automation is not active. Returning undefined is a detectable bot signal — fingerprinting scripts check typeof navigator.webdriver === 'boolean' as part of headless detection. Co-Authored-By: Claude Sonnet 4.6 <[email protected]> * Make stealth profile stable by default, rotation opt-in Picking a random profile per BrowserContext meant one address would cycle through different browser identities, which is itself a bot signal, and the rotated profile carries no matching TLS or timezone fingerprint. Default to a single stable profile; opt into rotation with OBSCURA_ROTATE_PROFILE, or pin one with OBSCURA_PROFILE=<index>. Drive timezone from the process TZ so Intl.DateTimeFormat and Date report one consistent zone. Default Europe/Berlin; override with OBSCURA_TIMEZONE. Update navigator.webdriver test to expect false, matching real Chrome. --------- Co-authored-by: SGavrl <[email protected]>
This commit is contained in:
johnnogueiraandSGavrl authored and GitHub committed
1 parent
f20626bdbd
commit
a23dad7cd9
7 files changed
+171
-26
No files matched your search
Vendored
+23
-22
@@ -72,7 +72,15 @@ function _fpNoise(x, y, channel) {
|
||||
var _fpCache = null;
|
||||
function _getFp() {
|
||||
if (_fpCache) return _fpCache;
|
||||
const gpuPool = [
|
||||
const isMac = (globalThis.__obscura_ua_platform || 'Windows') === 'macOS';
|
||||
const gpuPool = isMac ? [
|
||||
'ANGLE (Apple, ANGLE Metal Renderer: Apple M1, Unspecified Version)',
|
||||
'ANGLE (Apple, ANGLE Metal Renderer: Apple M1 Pro, Unspecified Version)',
|
||||
'ANGLE (Apple, ANGLE Metal Renderer: Apple M2, Unspecified Version)',
|
||||
'ANGLE (Apple, ANGLE Metal Renderer: Apple M2 Pro, Unspecified Version)',
|
||||
'ANGLE (Apple, ANGLE Metal Renderer: Apple M3, Unspecified Version)',
|
||||
'ANGLE (Intel Inc., ANGLE Metal Renderer: Intel(R) Iris(TM) Plus Graphics, Unspecified Version)',
|
||||
] : [
|
||||
'ANGLE (NVIDIA, NVIDIA GeForce RTX 3060 Direct3D11 vs_5_0 ps_5_0, D3D11)',
|
||||
'ANGLE (NVIDIA, NVIDIA GeForce GTX 1660 SUPER Direct3D11 vs_5_0 ps_5_0, D3D11)',
|
||||
'ANGLE (NVIDIA, NVIDIA GeForce RTX 2070 SUPER Direct3D11 vs_5_0 ps_5_0, D3D11)',
|
||||
@@ -86,7 +94,11 @@ function _getFp() {
|
||||
'ANGLE (AMD, AMD Radeon RX 5700 XT Direct3D11 vs_5_0 ps_5_0, D3D11)',
|
||||
'ANGLE (NVIDIA, NVIDIA GeForce RTX 3080 Direct3D11 vs_5_0 ps_5_0, D3D11)',
|
||||
];
|
||||
const gpuVendorPool = [
|
||||
const gpuVendorPool = isMac ? [
|
||||
'Google Inc. (Apple)','Google Inc. (Apple)','Google Inc. (Apple)',
|
||||
'Google Inc. (Apple)','Google Inc. (Apple)',
|
||||
'Google Inc. (Intel Inc.)',
|
||||
] : [
|
||||
'Google Inc. (NVIDIA)','Google Inc. (NVIDIA)','Google Inc. (NVIDIA)',
|
||||
'Google Inc. (Intel)','Google Inc. (Intel)',
|
||||
'Google Inc. (AMD)','Google Inc. (AMD)',
|
||||
@@ -2354,14 +2366,14 @@ function _registerIframe(iframeEl) {
|
||||
globalThis.navigator = {
|
||||
get userAgent() { return globalThis.__obscura_ua || "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"; },
|
||||
get appVersion() { return this.userAgent.replace('Mozilla/', ''); },
|
||||
language: "en-US", languages: ["en-US","en"], platform: "Linux x86_64",
|
||||
language: "en-US", languages: ["en-US","en"], get platform() { return globalThis.__obscura_platform || "Win32"; },
|
||||
onLine: true, cookieEnabled: true, hardwareConcurrency: 8,
|
||||
maxTouchPoints: 0,
|
||||
vendor: "Google Inc.", product: "Gecko", productSub: "20030107",
|
||||
doNotTrack: null,
|
||||
deviceMemory: 8,
|
||||
connection: { effectiveType: "4g", rtt: 50, downlink: 10, saveData: false },
|
||||
get webdriver() { return undefined; },
|
||||
get webdriver() { return false; },
|
||||
pdfViewerEnabled: true,
|
||||
get plugins() {
|
||||
const p = [
|
||||
@@ -2393,7 +2405,7 @@ globalThis.navigator = {
|
||||
{brand: "Not=A?Brand", version: "24"},
|
||||
],
|
||||
mobile: false,
|
||||
platform: "Linux",
|
||||
get platform() { return globalThis.__obscura_ua_platform || "Windows"; },
|
||||
getHighEntropyValues(hints) {
|
||||
return Promise.resolve({
|
||||
architecture: "x86",
|
||||
@@ -2402,8 +2414,8 @@ globalThis.navigator = {
|
||||
fullVersionList: [{brand:"Google Chrome",version:"145.0.0.0"},{brand:"Chromium",version:"145.0.0.0"},{brand:"Not=A?Brand",version:"24.0.0.0"}],
|
||||
mobile: false,
|
||||
model: "",
|
||||
platform: "Linux",
|
||||
platformVersion: "6.8.0",
|
||||
platform: globalThis.__obscura_ua_platform || "Windows",
|
||||
platformVersion: globalThis.__obscura_ua_platform_version || "15.0.0",
|
||||
uaFullVersion: "145.0.0.0",
|
||||
});
|
||||
},
|
||||
@@ -5509,21 +5521,10 @@ _markNative(SpeechSynthesisUtterance);
|
||||
_markNative(MediaStream); _markNative(MediaStreamTrack);
|
||||
_markNative(RTCPeerConnection); _markNative(RTCSessionDescription); _markNative(RTCIceCandidate);
|
||||
|
||||
const _OrigDateTimeFormat = Intl.DateTimeFormat;
|
||||
const _defaultTZ = 'Europe/Berlin';
|
||||
Intl.DateTimeFormat = function(locales, options) {
|
||||
if (!options) options = {};
|
||||
if (!options.timeZone) options.timeZone = _defaultTZ;
|
||||
return new _OrigDateTimeFormat(locales, options);
|
||||
};
|
||||
Intl.DateTimeFormat.prototype = _OrigDateTimeFormat.prototype;
|
||||
Intl.DateTimeFormat.supportedLocalesOf = _OrigDateTimeFormat.supportedLocalesOf;
|
||||
const _origResolved = _OrigDateTimeFormat.prototype.resolvedOptions;
|
||||
_OrigDateTimeFormat.prototype.resolvedOptions = function() {
|
||||
const r = _origResolved.call(this);
|
||||
if (r.timeZone === 'UTC') r.timeZone = _defaultTZ;
|
||||
return r;
|
||||
};
|
||||
// Timezone is driven by the process TZ (set by the CLI, default Europe/Berlin),
|
||||
// so native Intl.DateTimeFormat and Date report the same zone. No JS override:
|
||||
// forcing a fixed zone here only on Intl left Date on UTC, which is the exact
|
||||
// cross-surface mismatch a fingerprinting script looks for.
|
||||
|
||||
if (typeof PointerEvent === 'undefined') {
|
||||
globalThis.PointerEvent = class PointerEvent extends MouseEvent {
|
||||
|
||||
@@ -206,6 +206,19 @@ impl ObscuraJsRuntime {
|
||||
format!("globalThis.__obscura_ua = '{}';", escaped),
|
||||
);
|
||||
}
|
||||
|
||||
pub fn set_platform(&mut self, platform: &str, ua_platform: &str, ua_platform_version: &str) {
|
||||
let p = platform.replace('\'', "\\'");
|
||||
let uap = ua_platform.replace('\'', "\\'");
|
||||
let uapv = ua_platform_version.replace('\'', "\\'");
|
||||
let _ = self.runtime.execute_script(
|
||||
"<set-platform>",
|
||||
format!(
|
||||
"globalThis.__obscura_platform='{}';globalThis.__obscura_ua_platform='{}';globalThis.__obscura_ua_platform_version='{}';",
|
||||
p, uap, uapv
|
||||
),
|
||||
);
|
||||
}
|
||||
pub fn evaluate(&mut self, expression: &str) -> Result<serde_json::Value, String> {
|
||||
let wrapped = Self::wrap_expression(expression);
|
||||
let result = self
|
||||
@@ -1511,7 +1524,7 @@ mod tests {
|
||||
let ua = rt.evaluate("navigator.userAgent").unwrap();
|
||||
assert!(ua.as_str().unwrap().contains("Chrome"), "UA should contain Chrome: {}", ua);
|
||||
let wd = rt.evaluate("navigator.webdriver").unwrap();
|
||||
assert_eq!(wd, serde_json::Value::Null);
|
||||
assert_eq!(wd, serde_json::json!(false));
|
||||
let plugins = rt.evaluate("navigator.plugins.length").unwrap();
|
||||
assert!(plugins.as_f64().unwrap() > 0.0, "Should have plugins");
|
||||
let chrome = rt.evaluate("typeof window.chrome").unwrap();
|
||||
|
||||
Reference in new issue
Block a user