webgl-caps-worker-spoof

A red-team configuration exercising the webgl caps worker spoof technique.

botverdict

1.00score

12/185checks fired

Convicting tells 6

br.automation_globalsAutomation-framework global or webdriver DOM attribute present

br.cdp_runtime_enabledCDP Runtime.enable detected (prototype-chain Proxy ownKeys trap)

br.webdriver_presentnavigator.webdriver is true

br.webgl_caps_worker_vs_mainWebGL capability vector (limits + extensions) differs between the main thread and a Worker OffscreenCanvas

br.webgl_getparameter_tamperedWebGLRenderingContext.getParameter is overridden (non-native toString)

net.tls_ext_order_static_within_sessionChromium-JA4 session repeated one TLS extension order (no per-connection permutation)