CloakBrowser

Detailed Description of CloakBrowser: A Stealth Chromium Browser for Advanced Web Automation

Introduction

CloakBrowser is a cutting-edge stealth browser designed to bypass anti-bot detection systems effectively. Unlike traditional headless browsers or patched configurations, CloakBrowser integrates source-level C++ modifications into its custom-built Chromium binary, ensuring it passes bot detection tests seamlessly. Developed by CloakHQ, this tool is a drop-in replacement for Playwright and Puppeteer, offering seamless integration with existing automation frameworks while maintaining high stealth capabilities.

Core Features & Technical Advantages

1. Stealth Chromium Binary

No JS Injection or Config Patches: Unlike tools like playwright-stealth or undetected-chromedriver, CloakBrowser modifies Chromium’s source code at the C++ level, ensuring it behaves identically to a real browser.
33 Source-Level Patches: The binary includes patches for:
Canvas and WebGL rendering (to mimic human-like interactions).
Audio and font handling (to avoid fingerprint detection).
GPU and screen properties (spoofed to match real hardware).
Automation signal removal (prevents CDP protocol leaks).
Human-Like Behavior (humanize=True):
Mouse movements follow Bézier curves with slight overshoot.
Keyboard typing simulates per-character delays and occasional typos.
Scrolling mimics natural acceleration, deceleration, and micro-steps.

2. Passes Major Anti-Bot Detection Systems

CloakBrowser has been rigorously tested against 30+ detection services, including:

reCAPTCHA v3: Achieves a human-level score of 0.9 (verified server-side).
Cloudflare Turnstile: Successfully passes both non-interactive and managed challenges.
FingerprintJS & BrowserScan: Detects as a normal browser, scoring NORMAL (4/4) in BrowserScan tests.
DeviceandBrowserInfo: Confirmed as human with 24/24 behavioral signals passed.
ShieldSquare & bot.incolumitas.com: Avoids blocking on production sites.

(See the provided test results for detailed verification.)

Integration with Automation Frameworks

1. Playwright & Puppeteer Compatibility

CloakBrowser is a drop-in replacement for standard Chromium-based browsers in:

Python (Playwright): Replace launch() with cloakbrowser.launch().

  from cloakbrowser import launch
  browser = launch()  # Auto-downloads stealth binary (~200MB)
  page = browser.new_page()
  page.goto("https://protected-site.com")

JavaScript (Playwright/Puppeteer):

  import { launch } from 'cloakbrowser';
  const browser = await launch();
  const page = await browser.newPage();
  await page.goto('https://example.com');

2. Persistent Profiles & Session Management

launch_persistent_context(): Creates a profile with cookies, localStorage, and cache persistence across sessions.

  from cloakbrowser import launch_persistent_context
  ctx = launch_persistent_context("./profile")
  page = ctx.new_page()
  page.goto("https://example.com")  # Cookies survive restarts!

Auto-Updating Binary: The tool automatically checks for updates and downloads the latest Chromium version (~145.0 as of October 2023).

Advanced Configuration Options

Custom Fingerprinting

CloakBrowser allows fine-grained control over browser fingerprints:

# Set a fixed fingerprint seed (for consistent sessions)
browser = launch(args=["--fingerprint=12345"])

# Override platform/GPU specs (e.g., for macOS compatibility)
browser = launch(
    args=[
        "--fingerprint-platform=windows",
        "--fingerprint-gpu-vendor=NVIDIA Corporation"
    ]
)

Proxy & GeoIP Support

Residential Proxies: Use proxy="http://user:pass@proxy:port" to spoof IP locations.

  browser = launch(proxy="https://res-proxy.example.com")

Auto-Detect Timezone/Locale:

  browser = launch(proxy="http://proxy:8080", geoip=True)

Human Behavior Presets

humanize=True: Enables realistic mouse/keyboard/scroll interactions.

  browser = launch(humanize=True, human_preset="careful")  # Slower, more deliberate movements

Custom Human Config:

  browser = launch(
      humanize=True,
      human_config={
          "mistype_chance": 0.1,
          "typing_delay": 50,
          "idle_between_actions": True
      }
  )

Docker & Self-Hosted Deployment

Pre-Built Docker Image

Run CloakBrowser in a container without manual setup:

docker run --rm cloakhq/cloakbrowser cloaktest

For scripts:

docker run --rm -v ./script.py:/app/script.py \
  cloakhq/cloakbrowser python /app/script.py

CloakBrowser Manager (Self-Hosted Profiles)

Manages multiple browser profiles with unique fingerprints.
Launch via http://localhost:8080 after running:

  docker run -p 8080:8080 -v cloakprofiles:/data \
    cloakhq/cloakbrowser-manager

Comparison with Other Tools

| Feature | Playwright | playwright-stealth | undetected-chromedriver | Camoufox | CloakBrowser | |-----------------------|------------------|----------------------|--------------------------|-------------------|-------------------| | Patch Level | None | JS Injection | Config Patches | C++ (Firefox) | C++ (Chromium) | | Survives Chrome Updates | N/A | Breaks often | Breaks often | Yes | ✅ Yes | | reCAPTCHA v3 Score | 0.1 (bot) | 0.3-0.5 | 0.3-0.7 | 0.7-0.9 | 0.9 (human) | | Cloudflare Turnstile | Fail | Sometimes Pass | Sometimes Pass | Pass | ✅ Pass | | Browser Engine | Chromium | Chromium | Chrome | Firefox | Chromium |

Use Cases & Best Practices

1. Web Scraping & Automation

Bypass CAPTCHAs by avoiding bot detection.
Use with residential proxies for scalability.

2. AI Agent Integration

Works seamlessly with Crawl4AI, agent-browser, and OpenAI Operators.
Supports Playwright/Puppeteer/Selenium frameworks.

3. Handling Aggressive Sites (DataDome, Turnstile)

Run in headed mode with a virtual display (Xvfb):

  sudo apt install xvfb; Xvfb :99 -screen 0 1920x1080x24 &
  export DISPLAY=:99
  browser = launch(headless=False, proxy="res-proxy")

4. Persistent Sessions

Use launch_persistent_context() to bypass incognito detection:

  ctx = launch_persistent_context("./profile", headless=False)
  page = ctx.new_page()
  page.goto("https://example.com")  # Cookies persist!

Troubleshooting & Common Issues

1. Binary Download Failures

Set a custom download URL:

  export CLOAKBROWSER_BINARY_PATH=/path/to/chrome

Use a local binary if downloading fails.

2. macOS Gatekeeper Blocking

Clear quarantine on first run:

  xattr -cr ~/.cloakbrowser/chromium-*/Chromium.app

3. Low reCAPTCHA Scores (0.1–0.3)

Avoid page.wait_for_timeout()—use native delays instead.
Use Playwright backend (patchright) for extra stealth:

  browser = launch(backend="patchright")

Security & Compliance

All releases are GPG-signed and verified via Sigstore.
Binary redistribution is allowed under the BINARY-LICENSE.
Legal Note: CloakBrowser is for legitimate automation. Unauthorized scraping/automation violates terms.

Conclusion

CloakBrowser stands out as a highly stealthy, maintainable alternative to traditional headless browsers. By leveraging source-level Chromium patches, it ensures compatibility with modern anti-bot systems while maintaining seamless integration with Playwright and Puppeteer. Whether for web scraping, AI automation, or bypassing CAPTCHAs, CloakBrowser provides a robust solution for advanced browser automation tasks.

For more details, visit the official site: cloakbrowser.dev

CloakBrowser: Stealth Chromium for Unblocking