mirror of
https://github.com/CloakHQ/CloakBrowser.git
synced 2026-06-23 11:41:46 +02:00
CloakHQ
ed79560e5f
Add bin/cloakserve — launches stealth Chromium with remote debugging enabled so users can connect via connect_over_cdp() from the host. Uses socat to forward 0.0.0.0:9222 to Chrome's localhost-only CDP port. Usage: docker run -d -p 127.0.0.1:9222:9222 cloakhq/cloakbrowser cloakserve Tested: all stealth checks pass via CDP, bot.sannysoft.com 54/54, reCAPTCHA 0.9, zero detection regressions.
70 lines
1.9 KiB
Python
Executable File
70 lines
1.9 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
"""Launch stealth Chromium as a CDP server for remote connections.
|
|
|
|
Usage:
|
|
cloakserve # headless on port 9222
|
|
cloakserve --headless=false # headed (uses Xvfb in Docker)
|
|
cloakserve --proxy-server=host:port # with proxy
|
|
|
|
Connect from host:
|
|
playwright.chromium.connect_over_cdp("http://localhost:9222")
|
|
"""
|
|
import os
|
|
import signal
|
|
import subprocess
|
|
import sys
|
|
import time
|
|
|
|
from cloakbrowser.config import get_default_stealth_args
|
|
from cloakbrowser.download import ensure_binary
|
|
|
|
EXPOSE_PORT = 9222 # External, 0.0.0.0 (user connects here)
|
|
CHROME_PORT = 9223 # Internal, 127.0.0.1 (Chrome binds here)
|
|
|
|
binary = ensure_binary()
|
|
|
|
chrome_args = [
|
|
binary,
|
|
f"--remote-debugging-port={CHROME_PORT}",
|
|
# "--remote-debugging-address=0.0.0.0", # TODO: enable after binary patch 032
|
|
# Sane defaults for running Chrome directly (outside Playwright)
|
|
"--no-first-run",
|
|
"--no-default-browser-check",
|
|
"--disable-dev-shm-usage",
|
|
"--disable-extensions",
|
|
"--disable-popup-blocking",
|
|
"--disable-background-networking",
|
|
"--metrics-recording-only",
|
|
] + get_default_stealth_args() + sys.argv[1:]
|
|
|
|
# Launch Chrome
|
|
chrome = subprocess.Popen(chrome_args)
|
|
|
|
# Wait for Chrome to start listening
|
|
time.sleep(2)
|
|
|
|
# Forward 0.0.0.0:9222 -> 127.0.0.1:9223
|
|
# Chrome hardcodes 127.0.0.1 for security; socat exposes it to Docker network.
|
|
# TODO: Remove socat after patching binary to support --remote-debugging-address
|
|
socat = subprocess.Popen([
|
|
"socat",
|
|
f"TCP-LISTEN:{EXPOSE_PORT},fork,reuseaddr,bind=0.0.0.0",
|
|
f"TCP:127.0.0.1:{CHROME_PORT}",
|
|
])
|
|
|
|
print(f"CloakBrowser CDP server ready on port {EXPOSE_PORT}", flush=True)
|
|
|
|
|
|
def cleanup(sig, frame):
|
|
chrome.terminate()
|
|
socat.terminate()
|
|
sys.exit(0)
|
|
|
|
|
|
signal.signal(signal.SIGTERM, cleanup)
|
|
signal.signal(signal.SIGINT, cleanup)
|
|
|
|
# Wait for Chrome to exit, then clean up socat
|
|
chrome.wait()
|
|
socat.terminate()
|