i'm building a web browser for reverse engineers! * identify calls to common fingerprinting APIs * decode/decrypt known data collector payloads * override / hook things without leaving a trace * detect obfuscated scripts & deobfuscate + more

read the blog post

nice work! last year i also collected a gallery of canvases used by fingerprinting scripts:

I love this!

@blastbots interesting, forking chromium is definitely the way, but it's time consuming. You should check

This is super useful thanks!

with debugger loop bypass? 👀

of course! 🫡

another veritas banger

this looks cool as hell, i have a few questions though - what is it based on, chromium or a fork like ungoogled-chromium - couldn’t this be an extension? what things about it make it unable to be put in an extension?

thank you! ^^ in case you want a more in depth in answer But the quick answers are 1. Chromium fork. (Currently an Electron fork technically but moving off of it) 2. Sadly couldn’t be an extension because you can’t overwrite these objects from extension

that’s sickk, have you considered forking from ungoogled chromium? i feel like a browser made for reverse engineers would benefit a lot from something more privacy focused

Could you imagine I had this when trying to bot PS5s on target years ago

So how many of these features really couldn't be done with a browser extension or user script?

None of these features can because you can’t override the prototypes of these objects from an extension I explain it in the blog post

Correcting myself: it is actually possible to do this from an extension using the chrome.scripting API but the custom browser approach still has benefits WRT stealth and ensuring it executes in all possible contexts

Based

insane

always wanted smth like this 👀 pls open source

Hopefully soon!

this is so sick can’t wait to try it

Hopefully soon just need to clean it up

this is so dope! looking forward to checking it out

Thank you!

beautiful!!!!

@nullptrs So great can’t wait for the release

Looks fire

Thank you!

looks fire, gj

gyula my goat

Can't wait for it.

Interesting work. On Brave we check if a website queried an API (eg Canvas) whose output we have a protection for (eg randomization) and then surface that to the user, so they can selectively toggle the protection. This helps diagnose anti-fingerprinting-related website breakage

insanely cool project. Great Work

I’d love to be a beta user and share my honest feedback on how I find this browser. If it really works the way I expect, I might start using it even more than Chrome, ngl.

A neat and honorable idea. I think the Chromium browser itself should allow such behavior "natively". Eventually every piece of code downloaded to your own computer should be allowed to be altered.

I was just now reading about it on Wished it was already released.

Lools good af hit me up for beta

Came from HackerNews Loved your Idea man <3

what's the use-case for this?

seriously awesome, gj

That's huge, wen will it be shipped?

This is 🔥 Can't wait for this to become open source so I can hack around with it.

Be careful with the Runtime.enable and Console.enable leak. Otherwise (like in older blogs), if you rename the "debugger" keyword, that would be super useful.

banger suite of reverse tools! especially the decoder/obfuscation + undetectable hook will give it a try ~ let's launch it mate on when it helps btw

What is the status of this project? Are you still planning a release?

Cool stuff 🫡

are we collabing or what

PLWASW LET ME USE