Skip to content
KitploitKITPLOIT
ToolsBlog
Log in
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
fortress — Stealth Chromium engine that stops scrapers and browser agents from getting blocked, with one line of code change. | Kitploit
Tools/GitHubGitHub/tiliondev/fortress
IDS/IPS EvasionAnti-BotFingerprint Spoofing
GitHubtiliondev/fortress

fortress

Stealth Chromium engine that stops scrapers and browser agents from getting blocked, with one line of code change.

View Repository
436322511h 45m agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Fortress

One browser engine to rule them all

Stealth Chromium engine · v3 (Chromium 153)

Chromium Docker pulls Discord
Copy for agent llms.txt MCP server npm tilion-mcp

Fortress is a stealth Chromium engine that stops your scrapers and browser agents from getting blocked, with one line of code change. Bot detectors flag automation by reading the browser fingerprint; Fortress corrects that fingerprint inside Chromium's C++, so the browser presents as an ordinary Chrome install. Scrapers finish their runs, agents reach the pages they were sent to, and CreepJS, Sannysoft, BrowserScan, and live Cloudflare Turnstile all read it as human. Point your existing Playwright or Puppeteer at Fortress over CDP, and nothing else in your code changes. With v3, every launch is a different coherent machine, so a fleet of sessions looks like a crowd of real users.

Headless, on datacenter IPs, with no proxies, Fortress served 86.4% of 92 protected pages; the next best stack (Camoufox) served 74.5%.

Blink · V8 · BoringSSL patched in-tree · ANGLE / D3D11-backed WebGL · JA3/JA4-coherent TLS · monthly upstream rebase · reproducible, gauntlet-gated releases

81

single-surface
C++ patches

0%

CreepJS
headless / stealth

48/48

distinct across a
64-clone fleet

[native code]

across every
realm

Fortress clearing a live Cloudflare challenge, then passing sannysoft and BrowserScan

Unedited capture of the Fortress binary in a real window: it clears a live Cloudflare challenge, turns bot.sannysoft.com all green, then reads BrowserScan “Normal”. Reproduce with tools/gauntlet.py.

Native-code parity

Every spoofed getter is a C++ getter: toString returns [native code], realm-invariant across main frame, iframes, and Web Workers.

Drop-in CDP

nodriver-style raw CDP on :9222, with no Runtime.enable leak. Keep Playwright, Puppeteer, or any CDP client; swap the browser, keep your code.

Clears the gauntlet

0% headless on CreepJS; Sannysoft, BrowserScan, and live Cloudflare Turnstile cleared, all as a stock Chrome install.

IPC persona graph

The persona reaches the renderer over IPC into a process-global config: zero command-line footprint, per-context isolation, thousands of coherent identities from one binary. --uxr-* switches stay as explicit overrides.

Fleet re-identity

on_restore re-keys the whole persona (canvas · audio · WebGL · GPU · screen · UA · TLS) from a snapshot with no relaunch. 64 clones come up 48/48 distinct.

Coherent by construction

Real V8, Blink, and BoringSSL keep engine, user-agent, and JA3/JA4 TLS shape in agreement, and WebGL / WebGPU agree with the persona GPU to the parameter level: limits, precision and extensions as well as the renderer string.


What's new: v3 · 153.0.8010.36 · Fleet Engine

v3 turns Fortress from a coherent single persona into a coherent fleet engine: 87 commits on patches/, a Chromium 151/152 to 153 rebase, and the changes below.

Download Tool