What is this?
It's a stealth browser automation toolkit built on top of Patchright (a patched Playwright) aimed at QA testing, monitoring, scraping, and penetration testing. It focuses on producing clean Chrome sessions that get past WAFs like Cloudflare, Kasada, and DataDome out of the box.
It's a stealth browser automation toolkit built on top of Patchright (a patched Playwright) aimed at QA testing, monitoring, scraping, and penetration testing. It focuses on producing clean Chrome sessions that get past WAFs like Cloudflare, Kasada, and DataDome out of the box.Is this a standalone tool, or more of a wrapper around something else?It's essentially a thin wrapper around the original Patchright library with extra configuration and workflow conveniences layered on top, which the author says makes it easier to get started than using raw Patchright.
It's essentially a thin wrapper around the original Patchright library with extra configuration and workflow conveniences layered on top, which the author says makes it easier to get started than using raw Patchright.How do I get it running?Follow the Linux setup steps in the README, then configure the .env file (Chrome binary path, timezone, parallel session count, and the start page URL) before launching it.
Follow the Linux setup steps in the README, then configure the .env file (Chrome binary path, timezone, parallel session count, and the start page URL) before launching it.Do I need Chrome installed separately?Yes — by default it expects Google Chrome at /usr/bin/google-chrome-stable; you can point BROWSER_EXECUTABLE_PATH to a different binary if yours lives elsewhere.
Yes — by default it expects Google Chrome at /usr/bin/google-chrome-stable; you can point BROWSER_EXECUTABLE_PATH to a different binary if yours lives elsewhere.Does it guarantee bypassing WAFs like Cloudflare?The README only claims sessions 'pass Cloudflare, Kasada, DataDome, and other WAFs out of the box' without guaranteeing it, and it adds no fingerprint spoofing of its own — it relies entirely on whatever Patchright's built-in stealth patches already cover.
The README only claims sessions 'pass Cloudflare, Kasada, DataDome, and other WAFs out of the box' without guaranteeing it, and it adds no fingerprint spoofing of its own — it relies entirely on whatever Patchright's built-in stealth patches already cover.Does this run on Windows or macOS too, or just Linux?The README only documents setup for Linux, so Windows/macOS aren't covered — treat it as Linux-first unless you test it yourself elsewhere.
The README only documents setup for Linux, so Windows/macOS aren't covered — treat it as Linux-first unless you test it yourself elsewhere.What anti-detection tricks does it rely on?It leans fully on Patchright's stealth patches: the Runtime.enable leak is patched, --disable-blink-features=AutomationControlled is added, --enable-automation is removed, and navigator.webdriver natively returns false, with no extra fingerprint spoofing layered on top.
It leans fully on Patchright's stealth patches: the Runtime.enable leak is patched, --disable-blink-features=AutomationControlled is added, --enable-automation is removed, and navigator.webdriver natively returns false, with no extra fingerprint spoofing layered on top.Can I run multiple browser sessions at once?Yes, the MAX_PARALLEL setting in .env controls how many sessions run concurrently, and it defaults to 1.
Yes, the MAX_PARALLEL setting in .env controls how many sessions run concurrently, and it defaults to 1.Does the browser close itself when done?No, the session stays open until you manually close the browser window; it doesn't auto-terminate after navigating to the start page.
No, the session stays open until you manually close the browser window; it doesn't auto-terminate after navigating to the start page.What tech stack is this built with?It's a Node.js/TypeScript project built directly on the Patchright library, which itself is a stealth-patched fork of Playwright.
It's a Node.js/TypeScript project built directly on the Patchright library, which itself is a stealth-patched fork of Playwright.What are similar projects?botasaurus, MHDDoS, undetected-chromedriver, ovobrowser, invisible_puppeteer, XSStrike, untidetect-tools, CloakBrowser
botasaurus, MHDDoS, undetected-chromedriver, ovobrowser, invisible_puppeteer, XSStrike, untidetect-tools, CloakBrowserWhich topics is it in?web-application-firewall, fingerprinting, anti-detect-browser, cloudflare-bypass, stealth, qa, bypass, scraping, hacking-tool, red-team, pentesting, cloudflare
web-application-firewall, fingerprinting, anti-detect-browser, cloudflare-bypass, stealth, qa, bypass, scraping, hacking-tool, red-team, pentesting, cloudflare