# GodBrowser

> GodBrowser is a patched Chromium 147 anti-fingerprint browser. It ships per-profile, deterministic, internally-coherent device fingerprints across 5 OSes (Windows / macOS / Linux / iOS / Android) and 5 browser engines (Chrome / Safari / Firefox / Samsung Internet / Edge), and silently passes the major protection stacks (PerimeterX, DataDome, Cloudflare, Akamai, and more). It also auto-solves captchas in-browser. You integrate with it exactly like Chrome — launch it with flags, or drive it over the standard Chrome DevTools Protocol (CDP).

Integrate like Chrome: launch with flags, or drive over CDP (Chrome DevTools Protocol).
Public human guide: https://godbrowser.io/integrate

## Quick start
- Get the build (access-controlled):
    # GodBrowser binaries are access-gated; request access for the install one-liner + signed builds.
    # The integration info on this page is public; the binaries are not publicly distributed. Once you have the build, the usage below applies as-is.
- Run a persona at a URL (wrapper):
    ./tools/run_godbrowser.sh --bot-os=macos --bot-browser=chrome https://example.com
    # The wrapper sets sane defaults (mock-keychain, captcha-on-if-key-present, etc.) and forwards any --bot-* flag.
- Run the raw binary directly:
    /Applications/GodBrowser.app/Contents/MacOS/GodBrowser --bot-os=windows --bot-browser=firefox https://example.com
    # Every --bot-* flag works on the raw binary too; the wrapper is optional convenience.
- Deterministic persona (reproducible fingerprint):
    GodBrowser --bot-profile=<seed-string> https://example.com
    # A given seed always yields the identical coherent persona (UA, fonts, canvas, audio, WebGL, locale, timezone…).
- Automate over CDP (the integration path):
    GodBrowser --remote-debugging-port=9222 --remote-allow-origins=* --bot-profile=s7 https://example.com
    # Connect Puppeteer/Playwright/any CDP client to ws://127.0.0.1:9222 (the --remote-allow-origins=* is required for programmatic DevTools-WS clients). isTrusted input + the FP spoofing are native (not CDP-injected), so they survive automation.

## Personas
- --bot-os= windows|macos|linux|ios|android
- --bot-browser= chrome|safari|firefox|samsung|edge  (valid OS×browser subset only)
- --bot-profile=<seed>  deterministic coherent device (same seed => same fingerprint)
- --bot-config-locale=, --bot-egress-countries=

## Captcha auto-solve
Captcha auto-solve is built in. Provide a solving-service key via an env var (or --bot-captcha-key-file=<path>) and it auto-solves reCAPTCHA-v2 + auto-clicks Cloudflare-managed Turnstile checkboxes with no host sidecar. The wrapper turns it on automatically when a key is present (read from .env). Opt out with GB_CAPTCHA_OFF=1 or --bot-captcha-auto=off. The key is read browser-process-only and never reaches the renderer, page, command line, or logs.

## Proxy / geo egress
For geo-coherent egress, set GODBROWSER_PROXY_SEED=<proxy-template-url> in the environment and pick a country with --bot-proxy-seed-country=<ISO2> (the wrapper alias is --proxy-country=XX). The persona locale + timezone + Accept-Language are made coherent with the chosen exit country automatically. A static upstream proxy is --bot-proxy=<url> (no seed→locale resolution).

## Automation / integration
- CDP / Puppeteer / Playwright: launch with --remote-debugging-port=<port> and attach normally. The anti-fingerprint layer and trusted input are in the C++/V8 core, so they are present under automation (no JS injection a detector could catch).
- Headless: supported via --headless=new (use --enable-automation for headless dump/eval flows).
- Per-request isolation: one --bot-profile (or --user-data-dir) per identity; each profile is a stable, distinct, coherent device.
- Server-side coherence: JA4/TLS, HTTP/2 (Akamai-H2), and peetprint are aligned byte-for-byte with the real target browser — your proxy/egress just needs to be geo-coherent.
- Verifying a persona: open the browser at creepjs / fp-scanner / the target site; GodBrowser is designed to read as a real device (CreepJS headless_rating 0, 0 lies on Chrome personas).

## Environment variables
- --bot-captcha-key-file   solving-service key for in-browser auto-solve (browser-process only)
- GB_CAPTCHA_OFF=1         disable captcha auto-solve
- GODBROWSER_PROXY_SEED    proxy template URL (seed->locale->egress resolution)
- GB_BIN                   (wrapper) path to a specific binary

## Full parameter reference (139 switches)
Status legend: [verified]=tested working standalone (harness PASS); [needs-dep]=works once the noted external dependency is configured; [NOT-WIRED]=declared but not functional yet.

### bm (7)
- --bm-auth-file  [needs-dep]  —  applied browser
- --bm-capture-all  [needs-dep]  —  Capture every request/response pair, not just decrypted app traffic.  [applied browser-side via fingerprint_profile/launch (renderer-forward not required); external-infra (Busymate / solver) — dormant unless configured; Tier-2 needs the external dep]
- --bm-client  [needs-dep]  —  applied browser
- --bm-device-name  [needs-dep]  —  BusyMate capture on-switch + dormancy gate. No flag = stock behavior.  [applied browser-side via fingerprint_profile/launch (renderer-forward not required); external-infra (Busymate / solver) — dormant unless configured; Tier-2 needs the external dep]
- --bm-disable  [needs-dep]  —  applied browser
- --bm-ingest-url  [needs-dep]  —  applied browser
- --bm-self-test  [needs-dep]  —  applied browser

### bot (46)
- --bot-always-active  [verified]  —  Force document.hidden=false / visibilityState=visible / userActivation.  [launch-clean + wired]
- --bot-audio-noise-seed  [verified]  —  Override the audio noise seed.  [launch-clean + wired]
- --bot-auto-print-seed  [verified]  —  applied browser
- --bot-block-resources  [verified]  —  Fine-grained resource block list (images, media, fonts, ...).  [applied browser-side via fingerprint_profile/launch (renderer-forward not required)]
- --bot-bookmarks  [verified]  —  Pre-seed the BookmarkModel at startup.  [applied browser-side via fingerprint_profile/launch (renderer-forward not required)]
- --bot-browser  [verified]  —  Browser-kind override — drives UA-CH brands, EME stub, vendor strings.  [launch-clean + wired; tier-2 PASS: bot-browser=safari->navigator~"Safari":Y]
- --bot-browser-version  [verified]  —  launch
- --bot-cookies  [verified]  —  Pre-seed the CookieManager at startup.  [applied browser-side via fingerprint_profile/launch (renderer-forward not required)]
- --bot-custom-headers  [verified]  —  Inject custom HTTP request headers on navigation + subresources.  [launch-clean + wired]
- --bot-direct-resources  [verified]  —  applied browser
- --bot-egress-countries  [needs-dep]  —  needs live egress to fully verify (Tier
- --bot-enable-webrtc  [verified]  —  launch
- --bot-fp-telemetry  [verified]  —  launch
- --bot-fps  [verified]  —  rAF cadence control (n / profile / real).  [launch-clean + wired]
- --bot-humanize  [verified]  —  launch
- --bot-inject-random-history  [verified]  —  Pre-populate HistoryService + spoof history.length.  [launch-clean + wired]
- --bot-internal-auto-default  [verified]  —  launch
- --bot-mobile-force-touch  [verified]  —  launch
- --bot-network-info-override  [verified]  —  launch
- --bot-noise-seed  [verified]  —  Override the canvas noise seed.  [launch-clean + wired]
- --bot-noise-seed-mode  [verified]  —  Per-eTLD+1 noise seed mixing (profile / per-etld).  [launch-clean + wired]
- --bot-noop-prelude  [verified]  —  launch
- --bot-os  [verified]  —  Pick the OS family the profile spoofs (windows / macos / linux / android / ios).  [launch-clean + wired; tier-2 PASS: bot-os=windows->navigator~"Windows":Y; bot-os=ios->navigator~"iPhone|iPad":Y]
- --bot-pageload-jitter  [verified]  —  Synthetic NavigationTiming jitter.  [launch-clean + wired]
- --bot-port-protection  [verified]  —  launch
- --bot-prelude-upto  [verified]  —  launch
- --bot-profile  [verified]  —  Deterministic per-seed fingerprint. Same seed = same identity, anywhere.  [launch-clean + wired; tier-2 PASS: deterministic: same-seed UA == ]
- --bot-profile-dir  [verified]  —  Random-pick mode: rotate through a directory of profile seeds.  [applied browser-side via fingerprint_profile/launch (renderer-forward not required)]
- --bot-proxy-bypass-rgx  [verified]  —  launch
- --bot-proxy-seed  [needs-dep]  —  Deterministic per-profile proxy from an MPP / solver pool URL.  [applied browser-side via fingerprint_profile/launch (renderer-forward not required); needs live egress to fully verify (Tier-2)]
- --bot-proxy-seed-country  [needs-dep]  —  ISO-2 country filter for proxy-seed selection.  [applied browser-side via fingerprint_profile/launch (renderer-forward not required); needs live egress to fully verify (Tier-2)]
- --bot-proxy-seed-refresh  [needs-dep]  —  applied browser
- --bot-redis-key-prefix  [verified]  —  applied browser
- --bot-redis-uri  [verified]  —  Cross-machine session sync — restore cookies + storage per seed.  [applied browser-side via fingerprint_profile/launch (renderer-forward not required)]
- --bot-resource-mode  [verified]  —  lite/full resource blocker — drop non-essential requests pre-network.  [applied browser-side via fingerprint_profile/launch (renderer-forward not required)]
- --bot-script  [verified]  —  launch
- --bot-self-test  [verified]  —  applied browser
- --bot-session-visibility-cadence  [verified]  —  launch
- --bot-stack-seed  [verified]  —  launch
- --bot-time-scale  [verified]  —  Fractional time scaler for timing surfaces.  [launch-clean + wired]
- --bot-time-seed  [verified]  —  launch
- --bot-title  [verified]  —  launch
- --bot-tls-mimic  [verified]  —  launch
- --bot-utls  [verified]  —  applied browser
- --bot-webrtc-ice  [verified]  —  launch
- --bot-webrtc-noise-seed  [verified]  —  Override the WebRTC noise seed.  [launch-clean + wired]

### bot-captcha (6)
- --bot-captcha-auto  [needs-dep]  —  applied browser
- --bot-captcha-key-file  [needs-dep]  —  applied browser
- --bot-captcha-provider  [needs-dep]  —  applied browser
- --bot-captcha-proxy  [needs-dep]  —  applied browser
- --bot-captcha-timeout  [needs-dep]  —  applied browser
- --bot-captcha-types  [needs-dep]  —  applied browser

### bot-config (24)
- --bot-config-architecture  [verified]  —  launch
- --bot-config-bitness  [verified]  —  launch
- --bot-config-browser-brand  [verified]  —  launch
- --bot-config-color-scheme  [verified]  —  launch
- --bot-config-disable-device-scale-factor  [verified]  —  launch
- --bot-config-fonts  [verified]  —  launch
- --bot-config-keyboard  [verified]  —  launch
- --bot-config-languages  [verified]  —  navigator.languages AND the Accept-Language header.  [launch-clean + wired; tier-2 PASS: bot-config-languages=fr-FR,fr->navigator~"fr":Y]
- --bot-config-locale  [verified]  —  navigator.language, Intl.locale, ICU default.  [launch-clean + wired; tier-2 PASS: bot-config-locale=de-DE->navigator~"de":Y]
- --bot-config-location  [verified]  —  launch
- --bot-config-media-devices  [verified]  —  launch
- --bot-config-media-types  [verified]  —  launch
- --bot-config-mobile  [verified]  —  launch
- --bot-config-model  [verified]  —  launch
- --bot-config-no-tz-warning  [verified]  —  applied browser
- --bot-config-orientation  [verified]  —  launch
- --bot-config-platform  [verified]  —  launch
- --bot-config-platform-version  [verified]  —  launch
- --bot-config-speech-voices  [verified]  —  launch
- --bot-config-stack-size  [verified]  —  launch
- --bot-config-timezone  [verified]  —  ICU + V8 isolate timezone.  [launch-clean + wired; tier-2 PASS: bot-config-timezone=Asia/Tokyo->Intl~"Tokyo":Y]
- --bot-config-ua-full-version  [verified]  —  launch
- --bot-config-webgl  [verified]  —  Short-circuit WebGL context creation when set to disabled.  [launch-clean + wired]
- --bot-config-webgpu  [verified]  —  Short-circuit WebGPU when set to disabled.  [launch-clean + wired]

### bot-config-noise (10)
- --bot-config-noise-audio-context  [verified]  —  launch
- --bot-config-noise-canvas  [verified]  —  launch
- --bot-config-noise-client-rects  [verified]  —  launch
- --bot-config-noise-scale-audio-context  [verified]  —  launch
- --bot-config-noise-scale-canvas  [verified]  —  launch
- --bot-config-noise-scale-client-rects  [verified]  —  launch
- --bot-config-noise-scale-text-rects  [verified]  —  launch
- --bot-config-noise-scale-webgl-image  [verified]  —  launch
- --bot-config-noise-text-rects  [verified]  —  launch
- --bot-config-noise-webgl-image  [verified]  —  launch

### bot-disable (44)
- --bot-disable-audio-sample-rate-spoof  [NOT-WIRED: do not rely on]  —  DEFINED but consumed nowhere (not forwarded + no browser
- --bot-disable-audio-spoof  [verified]  —  launch
- --bot-disable-battery-spoof  [verified]  —  launch
- --bot-disable-behavioral-jitter  [verified]  —  launch
- --bot-disable-click-gaussian  [verified]  —  launch
- --bot-disable-codec-spoof  [verified]  —  launch
- --bot-disable-console-message  [verified]  —  launch
- --bot-disable-debugger  [verified]  —  Strip the DevTools-attach signal.  [launch-clean + wired]
- --bot-disable-devmem-spoof  [verified]  —  launch
- --bot-disable-document-hidden-spoof  [verified]  —  launch
- --bot-disable-etld-noise  [verified]  —  applied browser
- --bot-disable-fonts-spoof  [verified]  —  launch
- --bot-disable-host-gpu-match  [verified]  —  launch
- --bot-disable-hwconcur-spoof  [verified]  —  launch
- --bot-disable-iife-prelude  [verified]  —  launch
- --bot-disable-ime-composition  [verified]  —  launch
- --bot-disable-languages-spoof  [verified]  —  launch
- --bot-disable-matchmedia-spoof  [verified]  —  applied browser
- --bot-disable-media-devices-spoof  [verified]  —  launch
- --bot-disable-mouse-curvature  [verified]  —  launch
- --bot-disable-native-cloak  [verified]  —  launch
- --bot-disable-netinfo-spoof  [verified]  —  launch
- --bot-disable-permissions-spoof  [verified]  —  launch
- --bot-disable-plugins-spoof  [verified]  —  launch
- --bot-disable-pointer-jitter  [verified]  —  applied browser
- --bot-disable-screen-spoof  [verified]  —  launch
- --bot-disable-screenxy-farble  [verified]  —  launch
- --bot-disable-stack-spoof  [verified]  —  launch
- --bot-disable-storage-spoof  [verified]  —  launch
- --bot-disable-symbol-marker  [verified]  —  launch
- --bot-disable-timezone-spoof  [verified]  —  launch
- --bot-disable-ua-spoof  [verified]  —  launch
- --bot-disable-uach-http-spoof  [verified]  —  launch
- --bot-disable-uach-spoof  [verified]  —  launch
- --bot-disable-voice-canonical  [verified]  —  launch
- --bot-disable-webauthn-spoof  [verified]  —  launch
- --bot-disable-webgl-vendor-spoof  [verified]  —  launch
- --bot-disable-webgpu-quantize  [verified]  —  launch
- --bot-disable-webrtc  [verified]  —  Remove RTCPeerConnection + getUserMedia entirely.  [launch-clean + wired]
- --bot-disable-webrtc-ice-spoof  [verified]  —  launch
- --bot-disable-webrtc-sdp-spoof  [verified]  —  launch
- --bot-disable-wheel-inertia  [verified]  —  launch
- --bot-disable-widevine-stub  [verified]  —  launch
- --bot-disable-window-chrome-spoof  [verified]  —  launch

### other (2)
- --no-bot-auto  [verified]  —  applied browser
- --title-id-prefix  [verified]  —  applied browser


## Getting the build
This page (integration info + params) is public; the GodBrowser binaries are ACCESS-CONTROLLED, not publicly distributed.
Request access to receive the install one-liner + signed macOS/Linux/Windows builds. The usage above applies once you have the build.