
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
puppeteer-real-browser
Advanced tools
This package is designed to bypass puppeteer's bot-detecting captchas such as Cloudflare. It acts like a real browser and can be managed with puppeteer.
This package prevents Puppeteer from being detected as a bot in services like Cloudflare and allows you to pass captchas without any problems. It behaves like a real browser.
If you are using a Linux operating system, xvfb must be installed for the library to work correctly.
npm i puppeteer-real-browser
if you are using linux:
sudo apt-get install xvfb
const start = async () => {
var { connect } = await import('puppeteer-real-browser')
const { page, browser } = await connect({})
}
import { connect } from 'puppeteer-real-browser'
const { page, browser } = await connect({})
import { connect } from 'puppeteer-real-browser'
connect({
headless: 'auto',
args: []
customConfig: {}
skipTarget: [],
fingerprint: true,
turnstile: true,
connectOption: {}
// proxy:{
// host:'<proxy-host>',
// port:'<proxy-port>',
// username:'<proxy-username>',
// password:'<proxy-password>'
// }
})
.then(async response => {
const {browser, page} = response
await page.goto('<url>')
})
.catch(error=>{
console.log(error.message)
})
headless: auto can take the values true and false. If auto is set, it uses the option that is stable on the operating system in use.
args: Chromium başlatılırken eklemek istediğiniz ek bir flag varsa bu diziyle gönderebilirsiniz.
customConfig: When launch is executed, the variables you send in be onje are added. For example, you can specify the browser path with executablePath.
skipTarget: It uses target filter to avoid detection. You can send the targets you want to allow. This feature is in beta. Its use is not recommended.
fingerprint: If set to true, it injects a unique fingerprint ID into the page every time the browser is launched and prevents you from being caught.
turnstile: Cloudflare Turnstile automatically clicks on Captchas if set to true
connectOption: The variables you send when connecting to chromium created with puppeteer.connect are added
Distributed under the MIT License. See LICENSE for more information.
No responsibility is accepted for the use of this software. This software is intended for educational and informational purposes only. Users should use this software at their own risk. The developer cannot be held liable for any damages that may result from the use of this software.
This software is not intended to bypass Cloudflare Captcha or any other security measure. It must not be used for malicious purposes. Malicious use may result in legal consequences.
This software is not officially endorsed or guaranteed. Users can visit the GitHub page to report bugs or contribute to the software, but they are not entitled to make any claims or request service fixes.
By using this software, you agree to this disclaimer.
FAQs
This package is designed to bypass puppeteer's bot-detecting captchas such as Cloudflare. It acts like a real browser and can be managed with puppeteer.
The npm package puppeteer-real-browser receives a total of 8,297 weekly downloads. As such, puppeteer-real-browser popularity was classified as popular.
We found that puppeteer-real-browser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.