tls-fingerprinting

Fast, local-first web content extraction for LLMs. Scrape, crawl, extract structured data — all from Rust. CLI, REST API, and MCP server.

Go HTTP client with browser-identical TLS/HTTP2 fingerprinting. Bypass bot detection by perfectly mimicking Chrome, Firefox, and Safari at the cryptographic level (JA3/JA4, Akamai fingerprint, header order). Supports HTTP/1.1, HTTP/2, HTTP/3, sessions, cookies, and proxies.

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

OpenAI-compatible gateway for FreeBuff coding models. Token pool, session lifecycle, TLS stealth, embedded admin dashboard. No ads, no CLI, just /v1/chat/completions.

TLS fingerprint emulation upstream proxy replay any ClientHello

Async fork of Python-TLS-Client with modern asyncio support, updated dependencies, and fixes for issues in the original abandoned library. Includes enhanced compatibility, stability improvements, and ongoing maintenance for Python 3.9–3.13.

PHP extension for browser-fingerprinted HTTP requests, built in Rust

JA4 proxy tooling.

Reverse Engineering Toolkit for Mobile APIs — 14 tools: traffic capture, client generation, TLS/HTTP2 fingerprinting, bot detection, token analysis, auth flow mapping, protobuf decoding, JS bundle scanning, cert pinning bypass, rate limit probing, mock servers, schema comparison

My stab at a TLS Fingerprinting package for golang

🕵️ Fast Rust CLI for OLX Portugal – browse listings, search thousands of ads, discover deals, and monitor prices. Designed for speed, automation, and multiple output formats for scripts and LLMs.

JavaScript TLS 1.3/1.2 implementation for Node.js, with full control over cryptographic keys and record layer.

DarkMatter - A high-performance web-security and proxy validation tool

Browserless scraper for O'Reilly Auto Parts — Bypasses Akamai Bot Manager v2 using TLS fingerprint impersonation (curl_cffi)

datadome captcha dd.t = fe vm solver for authorised security testing and research

Managed .NET 10 wrapper around libcurl-impersonate. Browser-grade TLS, HTTP/2 and HTTP/3 fingerprinting.

High-performance Discord Vanity Sniper with TLS Fingerprinting (Chrome 110), multi-token support, and asynchronous architecture for millisecond-speed URL claiming.

Measurement harness for proxy providers, browser engines and scraping targets. Every claim carries the run it came from.

Open-source bot protection for websites. Identifies and blocks bots, scrapers, and credential-stuffing tools by fingerprinting how they connect — before any request reaches your server. Self-hosted, deploys in 5 minutes.

Request-based Hermès (hermes.com) catalog scraper that reads the bck.hermes.com JSON API directly, behind DataDome, with no browser. Warms a session, solves DataDome via the Hyper Solutions API, then pulls full product detail at ~37 KB each. Written in Go