

Multi-protocol cryptographic analyzer auditing TLS, SSL, SSH, IKE, DNSSEC, and HTTP security headers. Detects 400+ cipher suites, generates JA3/HASSH…

Undetected version of the Playwright testing and automation library.

🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl!

Advanced per-app device / CPU / GPU spoofer for rooted Android — device profiles, per-app CPU models, prop & Android-ID spoofing, all driven by a…

OSINT tool researched and designed to hunt down IG handles

JA4+ is a suite of network fingerprinting standards

evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

A high-performance port spoofing tool built in Rust. Confuse port scanners with dynamic service emulation across all ports. Features customizable…

Stealth Chromium engine that stops scrapers and browser agents from getting blocked, with one line of code change.

Like curl, but it gets past Anubis and Cloudflare bot-walls.

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

Educational evercookie demo showing how browser storage and HTTP cache techniques can persistently re-identify a visitor.

A privacy-focused iOS app that raises awareness about what native apps can see

Successor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…

Reverse engineering toolkit for PerimeterX's bytecode VM, featuring a CFG-based disassembler, 5-layer decryption pipeline, opcode table…