v1.6.0

Nazak Browser Studio v1.6.0

Security, reliability and documentation hardening release. 535 automated tests passing.

🔐 Secrets storage — the choice is yours

• New nazak/core/secrets_store.py with three user-selectable modes:
  • plain — no encryption (legacy behaviour, fully readable);
  • dpapi — Windows DPAPI, user-scoped, zero management (Windows only);
  • passphrase — Fernet (AES-128-CBC + HMAC) with a key derived from your own passphrase via PBKDF2-HMAC-SHA256 (600k iterations). Lose the passphrase — lose the data; there is no backdoor.
• Account passwords / TOTP secrets are encrypted at rest on import, decrypted for the automated login flow, and always masked (Sup...t123) in every API response.
• GET/POST /api/security/secrets-mode REST endpoints, a GUI card (Settings → Secrets Storage), and a dedicated documentation section — the same decision is available in the API, the GUI and the docs.
• The passphrase is never written to disk; it lives only in process memory.
• Legacy plaintext notes stay readable: envelopes are self-describing (nzk1:...), so migration is seamless.

🛡️ Security hardening

• OAuth callback: single-use state tokens (CSRF), TLS-only callback URL validation, HTML escaping of reflected errors, per-instance state (no cross-request leakage).
• GUI/API server binds to loopback (127.0.0.1) by default, with an explicit warning if 0.0.0.0 is requested.
• Hostile proxy credentials stay JSON-escaped in the generated extension (background.js).

⚙️ Reliability

• Dynamic CDP port allocation (get_free_port()) replaces the fixed 9300 + idx range — parallel batches can no longer collide.
• cancel_all() and try/finally cleanup stop launched browsers, eliminating leaked Chrome processes when a cancel lands mid-upload.
• Captcha/challenge errors are fail-fast: they are classified as manual-action errors and never retried blindly.
• Platform normalization moved into production code (normalize_upload_platform).

📚 Docs

• Dolphin{anty} wording softened to "compatible subset" (no full-parity claim).
• Proxy diagnostics corrected to 4-stage.
• Autopost demo defaults moved into config.py.

🧪 Tests

• 535 passed — new suites for secrets storage, the secrets-mode API, OAuth state security, dynamic CDP ports / cancel cleanup, extension escaping and loopback binding.

⬆️ Upgrade notes

• New dependency: cryptography>=42.0.0.
• Secrets mode defaults to plain (previous behaviour); switching is entirely your decision and can be done at any time from the GUI or the API.

Nazak Browser Studio PRO v1.5.0 - Hardened Anti-Detect & Dolphin Parity Release

🚀 Nazak Browser Studio PRO v1.5.0

🛡️ Enterprise Anti-Detect Hardening, Dolphin Parity, & Complete Audit Remediation Release

This release introduces comprehensive security, persistence, and anti-detect hardening based on full architectural audit remediation, featuring 23 confirmed vulnerability and edge-case fixes, 100 new automated regression tests, bidirectional Netscape cookie spec parity, Dolphin{anty} Local API compatibility, and full bilingual documentation (English & Russian).

---

🌟 Key Highlights & Remediation Summary

1. 🔒 Security & Path Traversal Guards

• Profile ID Sanitization (C3, C4): Strict regex validation (^[a-zA-Z0-9_\-]+$) on all REST and CDP endpoints, preventing directory traversal and arbitrary file reads/deletes.
• Zip-Slip Protection (M3): Hardened bundle importer rejecting absolute paths, drive letters, and .. directory traversal sequences during archive extraction.
• CORS Localhost Restriction (C3): Restricted API access exclusively to trusted localhost and 127.0.0.1 origins, blocking cross-origin hijacking from external websites.
• Credential Isolation (H11): Stripped hardcoded credentials from CLI tools, migrating fully to environment variables with stdout secret masking (***).

2. ⚡ Storage, Persistence & Concurrency

• Atomic Profile Storage (C5): Thread-safe profile persistence with threading.RLock and atomic replacement via unique temporary files (profiles.json.<hex>.tmp), eliminating file corruption during concurrent operations.
• Duplicate ID Prevention (M5): Enforced unique profile IDs returning HTTP 409 Conflict on collision.
• Process Monitor Transition Guards (M1): Elimination of redundant disk write loops by updating profiles exclusively upon transition from RUNNING to STOPPED.
• Batch Operation Optimization (M2, M6): In-memory batched status mutations with a single disk save across mass launch, stop, and proxy check cycles.

3. 🎭 Stealth Engine & Fingerprint Synthesis

• MAIN World Execution Context (C1): Extension content scripts now execute strictly in the "world": "MAIN" context, guaranteeing prototype overrides execute before anti-fraud page scripts run.
• Safe JavaScript Interpolation (H6): All dynamic fingerprint variables in stealth.js are serialized via json.dumps(), preventing syntax breakage and script injection.
• Deterministic OS Mix: Mass generator now round-robins across selected OS platforms for even, realistic fleet synthesis.

4. 🤖 Dolphin{anty} Parity, Synchronizer & CDP Automation

• WebSocket Parity (H10): Added wsEndpoint alias alongside ws_endpoint in CDP responses for complete Dolphin automation compatibility.
• Async Network Polling (M8): Replaced blocking urllib calls in action synchronizer with non-blocking httpx.AsyncClient timeouts.
• Warmup Scenario Aliases (H9): Full backwards-compatible alias mapping for legacy scenario IDs with HTTP 400 validation on invalid requests.
• Thread-Safe WebSocket Telemetry (H1): Asynchronous WebSocket status dispatch from background threads using threadsafe loop scheduling.

5. 🍪 Cookie Management Fidelity

• Netscape Specification Parity (H3): Column 2 mapped to includeSubdomains and Column 4 mapped to httpOnly with #HttpOnly_ prefix support.

6. 🎨 GUI & Models

• ProxyType Import Fix (C2): Fixed broken GUI dialog import and restored enum re-export in models.
• Autopost Crash Guard (H2): Protected preview renderer against empty description strings.
• Truthful Telemetry (H4, M7): Replaced false-positive success InfoBars with verified status reporting.
• Shared Singletons (M4): Unified in-memory profile and browser launcher instances between GUI and REST API.

---

🧪 Quality & Test Coverage

• 492 automated tests passing across 10-job cross-platform CI matrix:
  • Windows & Ubuntu
  • Python 3.10, 3.11, 3.12, 3.13
  • 100 new deep defect tests covering security, storage concurrency, stealth, and scenario execution.
• Ruff linter & formatter: 0 errors.
• MyPy static type analysis: 0 errors.

---

📦 Release Assets

• NazakBrowserStudio-v1.5.0-Windows-x64.zip: Standalone portable Windows package (no installation required).
• NazakBrowserStudio_v1.5.0_Setup.exe: Windows 10/11 Fluent installer with .nazak bundle file associations and desktop shortcuts.
• SHA256SUMS.txt: SHA-256 cryptographic checksums for package verification.

Nazak Browser Studio PRO v1.4.1 - Senior Windows Build & Modern Installer

🚀 Nazak Browser Studio PRO v1.4.1

💎 Senior-Grade Windows Build Pipeline & Modern Installer Release

This release introduces an enterprise-grade Windows packaging pipeline, replacing generic packaging with a native Windows 11 Fluent application setup, high-DPI rendering manifest, Windows PE metadata embedding, and Inno Setup 6 installer integration.

---

✨ What's New in v1.4.1:

• 🪟 Modern Windows 11 High-DPI Manifest (app.manifest):

  • PerMonitorV2 DPI awareness ensuring crystal-clear text and vector iconography on 2K / 4K / High-DPI screens without GDI scaling blur.
  • longPathAware support for deep Chromium user data directory structures.
  • Common Controls V6 theming integration.

• 🏷️ Windows PE Resource Metadata (version_info.txt):

  • Embedded VS_VERSIONINFO resource directly in NazakBrowserStudio.exe.
  • Full FileVersion, ProductVersion (1.4.1.0), CompanyName (Nazak Technologies), and copyright attributes.

• 📦 Inno Setup 6 Enterprise Installer (installer.iss):

  • Native 64-bit Windows setup wizard.
  • Full .nazak file association in Windows Registry for portable profile packages.
  • Automatic Start Menu and Desktop shortcuts.
  • Clean uninstaller with preservation of user profiles (data/profiles/).

• ⚡ Optimized PyInstaller Specification (NazakBrowserStudio.spec):

  • Stripped unused heavy Qt6 frameworks (QtQml, QtQuick, QtPdf, Qt3D, QtBluetooth, QtSensors, QtDesigner) reducing footprint.
  • Bytecode optimization level 1 (assertion stripping).
  • UPX compression disabled to prevent antivirus heuristic false-positives.

• 🛠️ Automated Build Orchestrator (build_exe.py & build.bat):

  • 1-click end-to-end compilation with environment validation, Qt translation pruning (-15 MB), smoke testing, and SHA-256 integrity verification.

---

🧪 Quality & Test Coverage

• 293 unit & integration tests passing.

Nazak Browser Studio PRO v1.4.0

🌐 Nazak Browser Studio PRO v1.4.0 — Free Dolphin{anty} Parity & Automation Release

🚀 Major Highlights & New Features

• 🤖 Dolphin{anty}-Compatible Local Automation REST API & CDP WebSocket:
  • Parity endpoints: /v1.0/browser_profiles, /v1.0/browser_profiles/{id}/start, /v1.0/browser_profiles/{id}/stop, /v1.0/browser_profiles/active.
  • Dynamic free CDP port allocation (--remote-debugging-port) and WebSocket debugger resolution for seamless integration with Python Playwright, Puppeteer, Selenium, and custom parsing bots.
• 🍪 Batch Cookie Importer & Exporter:
  • Universal parser supporting delimited blocks (=== Profile 01 ===), JSON maps, folder directory scan, and ZIP archives.
  • Automatic creation of isolated hardware profiles on the fly for missing cookies.
  • Multi-profile cookie backup export to structured .zip archives.
• ⚡ Real-Time Action Synchronizer & Win32 Grid Tiling:
  • Master to N Workers real-time mouse click, keyboard typing, navigation, and scroll mirroring.
  • Anti-fraud Bezier humanizer with micro-jitter (20-80ms delays & subpixel trajectory randomization).
  • 1-Click Win32 window tiling grid arranging all running browsers in clean 2x2, 3x3, or 4x4 matrix layouts.
• 🔥 Scenario Constructor & Autonomous Multi-Step Warmup Engine:
  • Pre-built multi-step scenarios: E-Commerce & Ads Trust Booster, YouTube & Shorts Audience Warmup, Crypto/Web3 Investor, Finance High-CPC Banking.
  • Step inspector with dynamic parameter tuning and concurrency-pooled execution.
• 📦 1-Click Mass Profile Generator & Portable Bundles (.nazak):
  • Batch farm generator (1-100+ profiles) with round-robin proxy distribution and mixed OS fingerprints.
  • Export and import complete self-contained profile bundles (.nazak zip archives) with session state, cookies, and hardware seeds.
• 📱 Mobile Proxy IP Rotation URLs:
  • Auto-detection of rotation links (host:port:user:pass:http://change-ip, |http..., #http...).
  • 1-Click "Сменить IP" action in proxy manager and REST API endpoint (/api/profiles/{id}/rotate-proxy).
• 🎬 YouTube Shorts Stealth Autoposter & FFmpeg Uniqueizer:
  • 100% preserved deep video uniqueizer (-map_metadata -1, micro-crop, audio pitch shift), Spintax metadata generator, and Bezier human motorics.
• 🧪 293 Automated Tests: 100% passing test suite across all subsystems.

📦 Quick Start

1. Download NazakBrowserStudio-v1.4.0-Windows-x64.zip below.
2. Extract the archive to any directory.
3. Run NazakBrowserStudio.exe (or start_app.bat).

Nazak Browser Studio PRO v1.3.0

🌐 Nazak Browser Studio PRO v1.3.0 — Official Standalone Release

🚀 Highlights & Features

• 100% Total Hardware Isolation: Spoofed GPU (RTX 4090 / 3080 / Intel UHD), CPU cores, RAM, screen resolution, Canvas & WebAudio noise, ClientRects jitter, and WebRTC IP leak protection.
• Market Account Provisioner: One-click batch import for DarkStore, Retriv, and AccsMarket format (\login:pass:2fa:recovery).
• Live 2FA TOTP RFC 6238 Generator: Built-in 2FA engine generating dynamic 6-digit codes with real-time 1-second ticker.
• Automated Google & YouTube Login: Headless / headful CDP authentication handling 2FA challenge and YouTube Studio onboarding modals.
• YouTube Shorts Stealth Autoposter: Deep FFmpeg video uniqueizer (crop, color modulation, pitch shift, metadata removal) with humanized Bezier mouse curves and typing motorics.
• Organic Google Warmup Bot: Automated multi-niche browsing workflows to build Cookie Trust Score.
• 271 Comprehensive Automated Tests: 100% passing test suite covering all edge cases, UI/UX, CDP, and storage integrity.

📦 Quick Start

1. Download \NazakBrowserStudio-v1.3.0-Windows-x64.zip\ below.
2. Extract the archive to any directory.
3. Run \NazakBrowserStudio.exe\ (or \start_app.bat).