Skip to content

v11.1.0: Next-gen stealth engine + memory optimization

Choose a tag to compare

View all tags
@dondai1234 dondai1234 released this 21 Jul 10:14
v11.1.0
72f8bf4

Stealth fetch: next-generation anti-detection + memory optimization

Six novel innovations based on 2026 anti-detection research (31-target benchmark, CDP protocol analysis, Cloudflare v9 behavioral scoring).

1. System Chrome auto-detection (channel=chrome)

The biggest single win from the benchmark. Uses system-installed Google Chrome instead of bundled Chromium. Real TLS fingerprint (JA4) that matches real users. Falls back to Chromium if Chrome not installed.

2. Coherent fingerprint profiles + JS-layer patches

4 internally consistent fingerprint identities. JS init script patches signals patchright does NOT handle:

  • HeadlessChrome UA fix (both JS property and HTTP header)
  • navigator.webdriver = undefined (patchright sets false)
  • Canvas noise (getImageData + toDataURL interception, per-session deterministic)
  • Permissions API consistency
  • WebGL, plugins, platform, window.chrome (bundled Chromium only)

Injection via wait_until=commit + page.evaluate (patchright-compatible: CDP addScriptToEvaluateOnNewDocument and add_init_script both broken by patchright's Runtime.enable patch).

3. Human behavior simulation

Cloudflare v9 ML model weights behavioral telemetry. Bezier curve mouse movement (15-30 steps, ease-in-out, overshoot+correction), natural scroll, dwell time (1-2.5s). ~1.5-2.5s total, stealthy+humanize only.

4. CF Turnstile solver with human mouse movement

Moves mouse to checkbox via Bezier curve before clicking. Passes behavioral scoring.

5. Memory optimization

  • --renderer-process-limit=1 (saves ~100-200MB per avoided process)
  • --js-flags=--max-old-space-size=512 (caps V8 heap at 512MB vs default 4GB)
  • Memory.simulatePressureNotification via CDP after each fetch (triggers Chrome GC + cache drop, ~5ms, non-disruptive)
  • CDP session leak fix: detached after use

Live verification (real-world results)

bot.sannysoft.com: ALL checks pass (HEADCHR_UA, WebDriver, Chrome, Plugins, PHANTOM_*, SELENIUM, CHR_DEBUG_TOOLS)

Hard sites (content extracted):

  • CanadianInsider (CF Turnstile, hardest 31-site benchmark target): 200 OK, 78 KB
  • Medium (CF interstitial): 200 OK, 93 KB
  • StackOverflow (CF): 200 OK, 1.1 MB, full question page
  • NowSecure (CF challenge): 200 OK, 180 KB
  • Glassdoor (DataDome): 200 OK, 849 KB

Stealth signals:

  • navigator.webdriver: undefined (patched)
  • navigator.userAgent: Chrome/150 (no HeadlessChrome)
  • Canvas fingerprint: different per session (noise working)
  • Memory: RSS decreased over 5 sequential fetches (no leak)

804 tests (43 new in test_stealth_v11.py).

Assets 2
Loading