daijro/camoufox
Camoufox
Camoufox is a Firefox-based stealth automation browser designed to evade detection during automated browsing. It combines a fingerprint randomization engine that generates thousands of unique device attributes per session, native-level API interception to spoof WebRTC, WebGL, media, and other fingerprintable properties, and human behavior simulation that moves the cursor along natural, distance-aware trajectories. The browser is compiled from source with build-time stealth patches and runs headlessly via a lightweight virtual display buffer, making it suitable for web scraping, automated testing, and other tasks that require undetectable browser sessions.
What sets Camoufox apart is its comprehensive anti-detection approach that operates at multiple layers. It integrates directly with automation frameworks like Playwright and Puppeteer as a drop-in replacement, and provides a Python API for generating device profiles and managing proxies. Each session generates a new, realistic fingerprint covering fonts, screen dimensions, WebGL parameters, navigator properties, and more. The system also spoofs location, timezone, locale, and HTTP headers to match a target region, while intercepting WebRTC ICE candidates at the protocol level to replace the real IP address. Human-like browser launch behaviors, such as automatic profile generation and geolocation setting, further reduce detection risk.
Beyond core stealth, Camoufox includes features for content processing and privacy. It can block ads and tracking with custom filters, remove CSS animations and telemetry to produce a clean DOM, and support both main-world DOM modification and isolated DOM reading. The browser can be built from source for specific platforms via scripts and Docker, and exposes a remote WebSocket server for accessing browser instances from remote locations.
Features
- Stealth Browser Engines - A modified Firefox browser that spoofs fingerprints, location, and behavior to evade detection during automated browsing.
- Bot Detection Evasion - Sandboxes automation internals at the native level, patching webdriver flags, headless indicators, and input handling to prevent detection.
- Stealth Framework Connectors - Provides a drop-in replacement for Playwright and Puppeteer with built-in stealth patches.
- HTTP Header Spoofing - Customizes HTTP headers such as User-Agent and Accept-Language to mimic authentic browser traffic.
- Virtual Display Emulators - Uses a lightweight virtual display emulator to run the browser headlessly and avoid detection by anti-bot systems.
- Anti-Detection Automation Frameworks - Provides an automation framework that integrates with Playwright and Puppeteer, patching detection vectors for seamless stealth.
- Automation Framework Injections - Injects stealth patches directly into Playwright, Puppeteer, and other automation frameworks to hide automation traces.
- Anti-Bot Evasion - Runs automated browsing sessions that evade fingerprinting, bot detection, and rate-limiting by mimicking real human browsing characteristics.
- Browser Fingerprint Generators - Generates and injects realistic device profiles at the native level to create convincing browser fingerprints that evade JavaScript-based detection.
- Spoofing Tools - Overrides navigator properties such as userAgent, platform, and language to impersonate a target browser.
- Screen & Window Property Spoofing - Spoofs screen resolution, window dimensions, color depth, and other display properties to match a real device.
- Fingerprint Randomization - Generates a new, unique device fingerprint for every browser session to prevent persistent tracking.
- Media & Audio Device Spoofing - Spoofs counts and properties of media devices (microphones, webcams, speakers) to evade audio and video fingerprinting.
- WebGL Fingerprint Spoofing - Spoofs WebGL renderer, vendor, extensions, and shader precision to prevent GPU-based fingerprinting.
- Font Profile Spoofing - Customizes the browser's exposed font list to match a target operating system for realistic fingerprint spoofing.
- Human Behavior Simulations - Simulates natural cursor trajectories and movement patterns to evade behavioral detection.
- Human-Like Browser Drivers - Simulates natural mouse movements, clicks, and scrolls to avoid anti-bot behavioral detection during automated browsing.
- Mouse Movement Simulations - Simulates natural mouse trajectories and click patterns to evade behavioral detection during automated browsing.
- Location & Locale Spoofing - Spoofs timezone, locale, language, and geolocation to match a target region and prevent location-based detection.
- Stealth Navigation - Collects data from anti-bot websites by launching undetectable browser sessions with human-like behavior and randomized fingerprints.
- Stealth Browser Session Launches - Creates browser instances with automatically generated device characteristics, fingerprints, geolocation, and timezone to mimic real human browsing.
- WebRTC IP Spoofing - Modifies WebRTC ICE candidates and SDP at the protocol level to replace the real IP address with a spoofed one.
- Source-Level Patch Integration - Integrates stealth patches at the source level before compilation to produce a modified browser binary.
- API Interception Hooks - Hooks into system-level browser APIs at the native layer to spoof WebRTC, WebGL, and media properties.
- Feature Toggles - Enables blocking of images, WebRTC, WebGL, and Cross-Origin-Opener-Policy to reduce detection surface.
- Headless Browsers - Runs the browser headlessly by spawning a lightweight virtual display buffer to prevent headless detection.
- Web Scraping Evasion Tools - Masks automation traces and loads ad-blocking extensions to enable undetectable web data extraction.
- Browser Build Systems - Compiles custom browser binaries from source with embedded stealth patches and optimizations.
- Font Metrics Randomization - Shifts character spacing by random offsets to avoid detection based on font metrics.
- Integrated Browsing Behavior Modes - Combines human-like mouse movements, ad blocking, and DOM cleaning into a single mode for undetectable browsing.
- Isolated DOM Reading - Reads the DOM from an isolated execution context to bypass page-level detection scripts.
- Ad Blocking and Breakage Repairs - Bundles an ad-blocker with custom filters to prevent ads and tracking during automated browsing.
- Configuration Overrides - Passes a dictionary of settings to override default browser behavior, including experimental options.
- Browser Automation Interfaces - Ships a Python interface for generating device profiles, injecting spoofed fingerprints, and managing proxies.
- Browser Automation WebSocket Bridges - Starts a WebSocket server that exposes a browser instance for remote device and language access via automation libraries.
