├── .gitattributes
├── .github
└── workflows
│ └── xgo.yml
├── .gitignore
├── LICENSE
├── README.md
├── VERSION
├── example
└── server.py
├── hazetunnel
├── api
│ ├── cert.go
│ ├── cffi.go
│ ├── config.go
│ ├── http.go
│ ├── injector.go
│ ├── profiles.go
│ └── proxy.go
├── go.mod
├── go.sum
└── main.go
└── python-bindings
├── README.md
├── hazetunnel
├── __init__.py
├── __main__.py
├── __version__.py
├── bin
│ └── __init__.py
├── cffi.py
└── control.py
└── pyproject.toml
/.gitattributes:
--------------------------------------------------------------------------------
1 | *.py linguist-detectable=false
--------------------------------------------------------------------------------
/.github/workflows/xgo.yml:
--------------------------------------------------------------------------------
1 | name: Release Tags
2 |
3 | on:
4 | release:
5 | types: [created]
6 |
7 | jobs:
8 | build:
9 | runs-on: ubuntu-latest
10 | steps:
11 | - name: Checkout
12 | uses: actions/checkout@v4
13 |
14 | - name: Fetch Version from Tag
15 | run: echo "VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
16 |
17 | # Build and release CFFI artifacts
18 |
19 | - name: Build CFFI
20 | uses: crazy-max/ghaction-xgo@v3
21 | with:
22 | xgo_version: latest
23 | go_version: latest
24 | dest: cffi_dist
25 | prefix: hazetunnel-api-${{ env.VERSION }}
26 | targets: "*/*"
27 | v: true
28 | race: false
29 | ldflags: -s -w
30 | buildmode: c-shared
31 | trimpath: true
32 | working_dir: hazetunnel
33 |
34 | - name: Upload CFFI Build Artifacts to Workflow
35 | uses: actions/upload-artifact@v3
36 | with:
37 | name: cffi-build-artifacts-${{ env.VERSION }}
38 | path: hazetunnel/cffi_dist/**
39 |
40 | - name: Upload Release Assets with action-gh-release
41 | uses: softprops/action-gh-release@v1
42 | with:
43 | files: hazetunnel/cffi_dist/*
44 | env:
45 | GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
46 |
47 |
48 | permissions:
49 | contents: write
50 |
--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | # If you prefer the allow list template instead of the deny list, see community template:
2 | # https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
3 | #
4 | # Binaries for programs and plugins
5 | *.exe
6 | *.exe~
7 | *.dll
8 | *.dll~
9 | *.so
10 | *.dylib
11 | *.h
12 |
13 | # Test binary, built with `go test -c`
14 | *.test
15 |
16 | # Output of the go coverage tool, specifically when used with LiteIDE
17 | *.out
18 |
19 | # Dependency directories (remove the comment below to include it)
20 | # vendor/
21 |
22 | # Go workspace file
23 | go.work
24 |
25 | # Python
26 | __pycache__
27 | dist
28 | *.pyc
29 |
30 | *.pem
31 | credentials
--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | MIT License
2 |
3 | Copyright (c) 2024 daijro, rosahaj
4 |
5 | Permission is hereby granted, free of charge, to any person obtaining a copy
6 | of this software and associated documentation files (the "Software"), to deal
7 | in the Software without restriction, including without limitation the rights
8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 |
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 |
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 |
2 | Hazetunnel
3 |
4 |
5 |
6 | 🔮 Vindicate non-organic web traffic
7 |
8 |
9 | ---
10 |
11 | Hazetunnel is an MITM proxy that attempts to legitimize [BrowserForge](https://github.com/daijro/browserforge/)'s injected-browser web traffic by hijacking the TLS fingerprint to mirror the passed User-Agent.
12 |
13 | Additionally, it can inject a Javascript payload into the web page to defend against [worker fingerprinting](https://github.com/apify/fingerprint-suite/issues/64).
14 |
15 |
16 |
17 | ### Features ✨
18 |
19 | - Anti TLS fingerprinting 🪪
20 |
21 | - Emulate the ClientHello of browsers based on the passed User-Agent (e.g. Chrome/120)
22 | - Bypasses TLS fingerprinting checks
23 |
24 | - Javascript payload injection 💉
25 |
26 | - Prepends payload to all Javascript responses, including the web page Service/Shared worker scope.
27 | - Injects payload into embedded base64 encoded JavaScript within HTML responses ([see here](https://github.com/apify/fingerprint-suite/issues/64#issuecomment-1282877696))
28 |
29 | This project was built on [tlsproxy](https://github.com/rosahaj/tlsproxy), please leave them a star!
30 |
31 | ---
32 |
33 | # Usage
34 |
35 | This package can be installed and used through Python. It is avaliable on PyPi:
36 |
37 | ```bash
38 | pip install hazetunnel
39 | ```
40 |
41 | You can also use it as a standalone Go executable by building the tool with the [guide](https://github.com/daijro/hazetunnel?tab=readme-ov-file#building) below.
42 |
43 | ## CLI Usage
44 |
45 | After installing Hazetunnel through PyPi, it can be used as a standalone CLI application.
46 |
47 | This example will inject `alert('Hello world');` before all Javascript responses:
48 |
49 | ```bash
50 | hazetunnel run --payload "alert('Hello world');" --port 8080
51 | ```
52 |
53 |
54 |
55 |
56 | CLI parameters
57 |
58 |
59 | ```
60 | $ hazetunnel run --help
61 | Usage: hazetunnel run [OPTIONS]
62 |
63 | Run the MITM proxy
64 |
65 | Options:
66 | -p, --port TEXT Port to use. Default: 8080.
67 | --user_agent TEXT Override User-Agent headers.
68 | --payload TEXT Payload to inject into responses.
69 | --upstream_proxy TEXT Forward requests to an upstream proxy.
70 | --cert TEXT Path to the certificate file.
71 | --key TEXT Path to the key file.
72 | -v, --verbose Enable verbose output.
73 | --help Show this message and exit.
74 | ```
75 |
76 |
77 |
78 | More info on other CLI commands are avaliable [here](https://github.com/daijro/hazetunnel/tree/main/python-bindings#python-usage).
79 |
80 | ### Payload Injection
81 |
82 | #### Javascript responses
83 |
84 | This [example server](https://github.com/daijro/hazetunnel/blob/main/example/server.py) will return `console.log('Original JavaScript executed.')` when called:
85 |
86 | **Original response:**
87 |
88 | ```bash
89 | $ curl http://localhost:5000/js
90 | console.log('Original JavaScript executed.');
91 | ```
92 |
93 | **With Hazetunnel:**
94 |
95 | ```bash
96 | $ curl http://localhost:5000/js --proxy http://localhost:8080 --cacert cert.pem
97 | alert('Hello world');console.log('Original JavaScript executed.');
98 | ```
99 |
100 | #### HTML responses
101 |
102 | Additionally, Hazetunnel can inject payloads into HTML responses:
103 |
104 | ```bash
105 | $ curl http://localhost:5000/html --proxy http://localhost:8080 --cacert cert.pem
106 |
107 |
108 | Base64 JavaScript Testing Page
109 | This page includes an embedded base64 encoded JavaScript for testing.
110 |
111 |
112 |