WC

whitenightshadow/camoufox-reverse-mcp

Browser automation

This page was translated automatically. Technical details may differ from the original. View the original

551 stars 106 forks Quality 72 Trend 30

🔧 Anti-Detection Browser MCP Server | 35 JS reverse engineering tools + C++ engine-layer JSVMP fingerprint tracing

Overview

MCP Server based on anti-fingerprint browsers, specifically designed for JavaScript reverse engineering. An MCP (Model Context Protocol) server allows AI coding assistants (Claude Code, Cursor, Cline, etc.) to perform reverse operations on target websites via anti-fingerprint browser: interface parameter analysis, static analysis of JS files, dynamic breakpoint debugging, function hook tracking, network traffic interception, JSVMP bytecode analysis, cookie/storage management, and more. - Camoufox modifies fingerprint information, not a JS layer patch, making it undetectable at the root. - Juggler protocol sandbox isolation causes Playwright - BrowserForge to generate fingerprints by clicking , not randomly assembled. - Works normally on various strong anti-scraping sites such as RS, AK, JY, CF, etc. - Hooks use Object.defineProperty, so the page script cannot restore the original method In the dialog box of your AI coding tool (Cursor / Claude Code / Codex, etc.), type: Requires a customized version of camoufox-reverse browser. If not installed, an error message will be returned, but it will not affect the use of other tools. 👉 For a complete workflow on anti-crawling type identification, see docs/JSVMP_PLAYBOOK.md : - trace_property_access: Trace JSVMP ** attributes (precise, C++ layer, undetectable) - compare_env: Collect browser **environment attributes (full, JS layer) - When disguising the Path B environment, use trace results to decide "which attributes to add" to avoid adding too many and introducing new leak points Three new tools have been added, launch_browser enable_trace parameters have been added.

Overview (machine translated)

Chinese | English

MCP Server based on anti-fingerprint browsers, specifically designed for JavaScript reverse engineering.

An MCP (Model Context Protocol) server allows AI coding assistants (Claude Code, Cursor, Cline, etc.) to perform reverse operations on target websites via the Camoufox anti-fingerprint browser: interface parameter analysis, static analysis of JS files, dynamic breakpoint debugging, function hook tracking, network traffic interception, JSVMP bytecode analysis, cookie/storage management, and more.

Why Choose Camoufox?

Capability Realization and Boundaries
Browser Firefox / Camoufox
Runtime Analysis Explicitly execute worlds, Frames, Hooks, and network capture
JSVMP Investigation Runtime probes and source code stakes, verified according to specific objectives
Persistent Hook Context initialization to define the boundary between pending and unloading

Core Advantages:

  • Camoufox modifies fingerprint information at the C++ level without relying on page JS patches, avoiding common descriptor/prototype leaks
  • Juggler isolation reduces some traces of page-side automation; Hooks, environmental differences, and timing may still be observed
  • BrowserForge generates fingerprints based on real-world traffic statistics, not randomly assembled
  • Can be used for anti-crawling and environmental dependency analysis; The availability of specific sites must be verified through actual samples
  • Hook optionally Object.defineProperty overwrite protection; Locking attributes may require reconstructing the context to recover

v1.8.0: Real source code practice and observation semantics fixed

  • Multiple rounds of local practice with real KProtect VM, JavaScript-obfuscator CFF, CryptoJS/FingerprintJS; Failure feedback proceeds to repair and revalidation.
  • Plot preservation of exceptions, this, and evaluation order, with main world/frame logs readable; Local Acorn supports modern syntax, conservatively skipping unsafe rewriting.
  • Exact strings can be selected evaluate_js(result_format="json_ascii"); Low side effect function logs can be selected hook_function(serialization="preview"), with clear records of synchronization exceptions.
  • Dynamic scripts are handled according to the current response and do not replay requests due to failed rewrites; Native snapshots clearly define the current page and world.

For details, see v1.8.0, Authentic Source Code and Verification.

v1.7.0: Evidence and diagnosis from multiple rounds of Agent hands-on practice

  • Added compare_network_requests, save_response_body, retaining the original request semantics and specifying the hash/byte caliber.

This page was translated automatically. Technical details may differ from the original.

Install

This server does not publish a one-line install command.

Open the repository installation guide New to MCP? Start with the mcpskill.org guide →

Configuration

{ "mcpServers": { "camoufox-reverse": { "command": "python", "args": ["-m", "camoufox_reverse_mcp"] } } }