Tools

musana/cf-hero

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

ferpalma21/nextjs-scanner

This script scans a list of URLs to detect if they are using **Next.js** and determines whether they are vulnerable to **CVE-2025-29927**. It…

secdev/scapy

Python-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…

ultrafunkamsterdam/nodriver

Successor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…

kaliiiiiiiiii-vinyzu/patchright

Undetected version of the Playwright testing and automation library.

foxio-llc/ja4

JA4+ is a suite of network fingerprinting standards

mandatoryprogrammer/thermoptic

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

rebrowser/rebrowser-patches

Collection of patches for puppeteer and playwright to avoid automation detection and leaks. Helps to avoid Cloudflare and DataDome CAPTCHA pages.…

tiliondev/fortress

Stealth Chromium engine that stops scrapers and browser agents from getting blocked, with one line of code change.

ak3zaidan/trust-decision-security

Reverse Engineer of Trust Decision Chinese Security

cisagov/findcdn

Scans domains to identify which Content Delivery Network (CDN) they use by fingerprinting HTTPS headers, CNAME records, and WHOIS data, with JSON…

jorianwoltjer/shodan-favicon-preimage

Generate a favicon that results in any target hash on Shodan

gorhill/ublock

Wide-spectrum content blocker for browsers that blocks ads, trackers, coin miners, and malicious sites using filter lists and customizable privacy…

apify/fingerprint-suite

Browser fingerprinting tools for anonymizing your scrapers. Developed by Apify.

mysk-research/loupe

A privacy-focused iOS app that raises awareness about what native apps can see

alobbs/macchanger

GNU MAC Changer

g4lb1t/pstf2

Passive Security Tools Fingerprinting Framework

fzakaria/anubis-fetch

Like curl, but it gets past Anubis and Cloudflare bot-walls.