Resisting CreepJS/Evasion Methods

[JaneJeon]

First of all, I just want to say that this project is amazing - I have a scraping setup with fingerprint injection and real Chrome that I use for scraping real websites (and it has been very successful in doing so), but CreepJS literally just left my setup naked and completely exposed. It's absolutely god-tier.

Considering that this side of the arms race is crushing it by a large margin, I want to use this issue to advance "the other side" of the arms race and discuss what methods one might be able to use to evade creepJS.

For example, I am able to hide everything from creepjs except for navigator (which I thought was also injected), where creepjs detects the lie very easily. Any ideas for how one would be able to evade this?

[abrahamjuliot]

Glad you like 👍. Special thanks to the many research works that continue to inspire the project.

Advancing evasion methods is outside the scope of this project, but I think it's great if others want to share and discuss here or point to a better source.

[JaneJeon]

Definitely, just wanted to put some heads together and use this as a jumping off point. Thanks for understanding!

[abrahamjuliot]

I'm guiding this over to the discussion topic section. If you have any specific issues/questions on this topic, let's discuss.

As a more focused source, here's a nice repo.

https://github.com/niespodd/browser-fingerprinting

[JaneJeon]

For what it's worth, I've tried every method on that page and the "best" of the bunch was puppeteer-extra-plugin-stealth, which, of course, CreepJS is able to detect the crap out of.