Topics / #anti-detection
Anti-detection projects on GitHub
Browser automation setups that bypass anti-bot systems for web scraping and testing.
As of , the most-starred Anti-detection projects on GitHub are obscura (29K stars), FlareSolverr (15.9K stars) and SeleniumBase (13.1K stars). GitHub.Locker tracks 16 Anti-detection repositories with 121.1K stars combined. The fastest-growing on October 16 was obscura, with +41 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
+41obscura
h4ckf0r0day/obscura · ★ 29KAn open-source headless browser engine written in Rust, built for web scraping and AI agent automation. It runs real JavaScript via an embedded V8 and supports the Chrome DevTools Protocol.
+36vm2api
dofastted/vm2api · ★ 1.2Kvm2api is a self-hosted proxy that runs your Claude/Anthropic (or OpenAI-compatible) API traffic through a real-looking virtual machine or Docker 'slot' so the account looks like a genuine Claude Console client instead of relying on system-prompt tricks or persona injection.
+15FlareSolverr
FlareSolverr/FlareSolverr · ★ 15.9KIt is a proxy server that bypasses Cloudflare and DDoS-GUARD protection: it loads the site in a real Chrome browser, waits out the challenge, and hands back the HTML and cookies your own HTTP client can reuse.
+14donutbrowser
donutbrowser/donutbrowser · ★ 4.1KDonut Browser is an open-source anti-detect browser built on a privacy-focused Chromium fork. It lets you run unlimited isolated browser profiles, each with its own fingerprint, cookies, extensions, and proxy, to stay hidden from fingerprinting and anti-bot services.
The all-time top
16 projects · by stars
- 29K
#1 · h4ckf0r0day/obscuraobscura
An open-source headless browser engine written in Rust, built for web scraping and AI agent automation. It runs real JavaScript via an embedded V8 and supports the Chrome DevTools Protocol.
- 15.9K
#2 · FlareSolverr/FlareSolverrFlareSolverr
It is a proxy server that bypasses Cloudflare and DDoS-GUARD protection: it loads the site in a real Chrome browser, waits out the challenge, and hands back the HTML and cookies your own HTTP client can reuse.
- 13.1K
#3 · seleniumbase/SeleniumBaseSeleniumBase
SeleniumBase is an all-in-one Python framework for browser automation — web crawling, testing, scraping, and stealth. Its CDP Mode bypasses bot-detection in Chromium-based browsers, and a Stealthy Playwright Mode extends that to Playwright.
- 4

undetected-chromedriver
12.9Kultrafunkamsterdam/undetected-chromedriver · PythonIt is a patched Selenium Chromedriver for Python that automatically downloads and modifies the chromedriver binary so it evades anti-bot systems like Distil, Imperva, DataDome and Cloudflare IUAM.
- 5

nopecha-extension
11KNopeCHALLC/nopecha-extensionNopeCHA is a browser extension that automatically detects and solves CAPTCHAs on any page, powered by multimodal AI running through the NopeCHA API platform.
- 6

webshell
10.8Ktennc/webshell · PHPIt's a community collection of webshells - scripts that give you control of a web server once uploaded - covering all the common server-side languages and maintained by tennc with 10k+ stars.
- 7
ClashMac
6.3K666OS/ClashMacClashMac is a native macOS proxy client built entirely in SwiftUI around the Clash/Mihomo engine, with a real-time dashboard, system-wide TUN proxying, and a built-in anti-detect fingerprint browser.
- 8

botasaurus
5.8Komkarcloud/botasaurus · PythonBotasaurus is an all-in-one Python web scraping framework built to make scrapers that pass bot-detection checks, including Cloudflare WAF, BrowserScan, Fingerprint, Datadome, and Cloudflare Turnstile CAPTCHA.
- 9

gmail-account-creator
5.4KShadowHackrs/gmail-account-creator · PythonGmail Creator Pro is a Python automation tool for creating Gmail accounts in bulk. It pairs anti-detection tricks with phone-verification workarounds and optional 5sim integration.
- 10

donutbrowser
4.1Kdonutbrowser/donutbrowser · RustDonut Browser is an open-source anti-detect browser built on a privacy-focused Chromium fork. It lets you run unlimited isolated browser profiles, each with its own fingerprint, cookies, extensions, and proxy, to stay hidden from fingerprinting and anti-bot services.
- 11
anti-mage
2.1KN4darae/anti-mage · GoAnti-Mage is a free, open-source Go project that detects anti-detect browsers and spoofed browser profiles by checking whether a browser's own reported surfaces (fonts, timezone, WebGL, screen geometry, audio, etc.) are internally consistent, instead of matching known-tool signatures.
- 12

untidetect-tools
2KTheGP/untidetect-toolsA curated markdown list maintained by the author of their own anti-detect project, tracking anti-detect/humanizing browsers, browser-automation and fingerprint-spoofing libraries, captcha solvers, SMS-activation services, and proxy providers used to avoid bot and fingerprint detection.
- 13

vm2api
1.2Kdofastted/vm2api · JavaScriptvm2api is a self-hosted proxy that runs your Claude/Anthropic (or OpenAI-compatible) API traffic through a real-looking virtual machine or Docker 'slot' so the account looks like a genuine Claude Console client instead of relying on system-prompt tricks or persona injection.
- 14

Prism-Browser-Community
690DFarm6/Prism-Browser-Community · TypeScriptPrism Browser is a local-first, open-source fingerprint browser environment manager built on a customized Chromium and Electron. It lets you create multiple isolated browser profiles, each with its own cookies, cache, extensions, proxy settings, and fingerprint configuration.
- 15

Chromix
479xiaozhou26/Chromix · PythonA Chromium-based browser build that shows every site a coherent, per-launch browser persona across JavaScript-visible surfaces, paired with lightweight Python and Node SDKs for automation. Stated uses: browser automation, compatibility testing, privacy research, and controlled fingerprinting experiments.
- 16

github-farm
354d4ncboz/github-farm · PythonIt is an automation framework that farms GitHub OAuth signup bonuses across multiple AI-gateway platforms (Tabi AI, GoRouter, CodeBuddy Global) by generating email aliases, catching their OTP codes over IMAP, and harvesting the resulting OAuth sessions.
Related topics
Often tagged together