Fingerprint Spoofing

sleeyax/burp-awesome-tls

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

mandatoryprogrammer/thermoptic

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

1837620622/cloudflare-bypass-2026

Cloudflare Turnstile 绕过工具 | Cloudflare Bypass Tool based on SeleniumBase UC Mode | 支持 Mac/Windows/Linux

matrixleons/evilwaf

evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

musana/cf-hero

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

vxfemboy/ghostport

A high-performance port spoofing tool built in Rust. Confuse port scanners with dynamic service emulation across all ports. Features customizable…

alobbs/macchanger

GNU MAC Changer

d0rb/rusttlsx

🦀 Stealth HTTP client for Rust . mimics real browser TLS fingerprints for undetectable requests. Fast, type-safe, and built for precision networking.

fzakaria/anubis-fetch

Like curl, but it gets past Anubis and Cloudflare bot-walls.

abhishekkr/n00brat

Remote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service

ultrafunkamsterdam/nodriver

Successor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…

kaliiiiiiiiii-vinyzu/patchright

Undetected version of the Playwright testing and automation library.

daijro/camoufox

🦊 Anti-detect browser

android1500/androidfaker

Android Faker a Simple Xposed Module Which Spoof Your Device IDs Values. Supporting Android 8.1+

alirezaparsi/copg

Advanced per-app device / CPU / GPU spoofer for rooted Android — device profiles, per-app CPU models, prop & Android-ID spoofing, all driven by a…

mysk-research/loupe

A privacy-focused iOS app that raises awareness about what native apps can see

elpy1/ubercookie

Educational evercookie demo showing how browser storage and HTTP cache techniques can persistently re-identify a visitor.