
whitenightshadow/camoufox-reverse-mcp
Browser automationThis page was translated automatically. Technical details may differ from the original. View the original
🔧 Anti-Detection Browser MCP Server | 35 JS reverse engineering tools + C++ engine-layer JSVMP fingerprint tracing
Overview
MCP Server based on anti-fingerprint browsers, specifically designed for JavaScript reverse engineering. An MCP (Model Context Protocol) server allows AI coding assistants (Claude Code, Cursor, Cline, etc.) to perform reverse operations on target websites via anti-fingerprint browser: interface parameter analysis, static analysis of JS files, dynamic breakpoint debugging, function hook tracking, network traffic interception, JSVMP bytecode analysis, cookie/storage management, and more. - Camoufox modifies fingerprint information, not a JS layer patch, making it undetectable at the root. - Juggler protocol sandbox isolation causes Playwright - BrowserForge to generate fingerprints by clicking , not randomly assembled. - Works normally on various strong anti-scraping sites such as RS, AK, JY, CF, etc. - Hooks use Object.defineProperty, so the page script cannot restore the original method In the dialog box of your AI coding tool (Cursor / Claude Code / Codex, etc.), type: Requires a customized version of camoufox-reverse browser. If not installed, an error message will be returned, but it will not affect the use of other tools. 👉 For a complete workflow on anti-crawling type identification, see docs/JSVMP_PLAYBOOK.md : - trace_property_access: Trace JSVMP ** attributes (precise, C++ layer, undetectable) - compare_env: Collect browser **environment attributes (full, JS layer) - When disguising the Path B environment, use trace results to decide "which attributes to add" to avoid adding too many and introducing new leak points Three new tools have been added, launch_browser enable_trace parameters have been added.
Overview (machine translated)
Chinese | English
MCP Server based on anti-fingerprint browsers, specifically designed for JavaScript reverse engineering.
An MCP (Model Context Protocol) server allows AI coding assistants (Claude Code, Cursor, Cline, etc.) to perform reverse operations on target websites via the Camoufox anti-fingerprint browser: interface parameter analysis, static analysis of JS files, dynamic breakpoint debugging, function hook tracking, network traffic interception, JSVMP bytecode analysis, cookie/storage management, and more.
Why Choose Camoufox?
| Capability | Realization and Boundaries |
|---|---|
| Browser | Firefox / Camoufox |
| Runtime Analysis | Explicitly execute worlds, Frames, Hooks, and network capture |
| JSVMP Investigation | Runtime probes and source code stakes, verified according to specific objectives |
| Persistent Hook | Context initialization to define the boundary between pending and unloading |
Core Advantages:
- Camoufox modifies fingerprint information at the C++ level without relying on page JS patches, avoiding common descriptor/prototype leaks
- Juggler isolation reduces some traces of page-side automation; Hooks, environmental differences, and timing may still be observed
- BrowserForge generates fingerprints based on real-world traffic statistics, not randomly assembled
- Can be used for anti-crawling and environmental dependency analysis; The availability of specific sites must be verified through actual samples
- Hook optionally
Object.definePropertyoverwrite protection; Locking attributes may require reconstructing the context to recover
v1.8.0: Real source code practice and observation semantics fixed
- Multiple rounds of local practice with real KProtect VM, JavaScript-obfuscator CFF, CryptoJS/FingerprintJS; Failure feedback proceeds to repair and revalidation.
- Plot preservation of exceptions, this, and evaluation order, with main world/frame logs readable; Local Acorn supports modern syntax, conservatively skipping unsafe rewriting.
- Exact strings can be selected
evaluate_js(result_format="json_ascii"); Low side effect function logs can be selectedhook_function(serialization="preview"), with clear records of synchronization exceptions. - Dynamic scripts are handled according to the current response and do not replay requests due to failed rewrites; Native snapshots clearly define the current page and world.
For details, see v1.8.0, Authentic Source Code and Verification.
v1.7.0: Evidence and diagnosis from multiple rounds of Agent hands-on practice
- Added
compare_network_requests,save_response_body, retaining the original request semantics and specifying the hash/byte caliber.
This page was translated automatically. Technical details may differ from the original.
Install
This server does not publish a one-line install command.
Open the repository installation guide New to MCP? Start with the mcpskill.org guide →Configuration
{
"mcpServers": {
"camoufox-reverse": {
"command": "python",
"args": ["-m", "camoufox_reverse_mcp"]
}
}
}