[Bug] Stealth being detected by Chrome DevTools Protocol (CDP)

[brauliobo]

Puppeeteer stealth is now being easily detected, checkout https://deviceandbrowserinfo.com/learning_zone/articles/detecting-headless-chrome-puppeteer-2024

[vladtreny]

It is not possible to fix it properly without modifying the Chromium source.

If anyone could start a project for a custom Chromium, would be great

[brauliobo]

It is possible to replace puppeteer with a websocket connection through a browser extension (loaded with --load-extension) and then control the browser with chrome.scripting.executeScript calls. I've tested and verified in a PoC.

I wonder though if it is enough to use Webdriver instead of CDP to communicate with Puppeteer

[vladtreny]

Interesting idea. Before puppeteer, I used extensions. Puppeteer is cool, but extensions provide additional useful apis.

You can also call cdp commands on the background of extension. It is not detectable.

[nwebson]

I made a patch for this issue, it disables Runtime.enable that causes this leak.
You can check it out here: https://github.com/rebrowser/rebrowser-patches

[vladtreny]

^ This way we lose a lot of funcs of puppeteer. We need a chromium patch... if anyone could start a project

[nwebson]

^ This way we lose a lot of funcs of puppeteer. We need a chromium patch... if anyone could start a project

@vladtreny I see no loss in functions of puppeteer after the patch. If you could find any, please let me know via issues section, I will be happy to address it.

[vladtreny]

console.log does not work
click does not work
other cdp functions do not work

[nwebson]

• console.log works just fine, but you don't get Runtime.consoleAPICalled events
• click and elements query work fine, too
• what other cdp functions?

[vladtreny]

Do you get even here?
page.on('console', async message => {

Also, show how do you click?

[nwebson]

page.on('console') relies on Runtime.consoleAPICalled, it won't work, that's true.
page.click(selector, clickOptions) - this one works fine with my patch

[vladtreny]

how does it detect element to click? can i select it correctly inside random 10 iframes?

does it click inside closed shadow root?

[nwebson]

@vladtreny it feels like I have to defend myself for something... I'm not trying to sell you anything.

You can try my solution, find any non-working stuff in patched version, and open a new issue for this. I will be glad to assist. Thanks.