webgl-renderer-spoof

A red-team configuration exercising the webgl renderer spoof technique.

botverdict

1.00score

21/185checks fired

Convicting tells 12

br.automation_globalsAutomation-framework global or webdriver DOM attribute present

br.cdp_runtime_enabledCDP Runtime.enable detected (prototype-chain Proxy ownKeys trap)

br.ch_he_headlessUA-Client-Hints high-entropy brand list reveals HeadlessChrome

br.headless_uaUser-Agent advertises a headless browser

br.no_chrome_objectChrome User-Agent but window.chrome is absent

br.permissions_anomalyNotification.permission contradicts the Permissions API state

br.webdriver_presentnavigator.webdriver is true

br.webgl_getparameter_tamperedWebGLRenderingContext.getParameter is overridden (non-native toString)

br.webgl_os_vs_uaWebGL renderer implies an OS that contradicts the UA platform

br.webgl_renderer_caps_mismatchWebGL renderer names a high-end GPU but the hardware capabilities are below its floor (spoofed string)

br.webgl_worker_vs_mainWebGL GPU renderer differs between the main thread and a Worker OffscreenCanvas

net.tls_ext_order_static_within_sessionChromium-JA4 session repeated one TLS extension order (no per-connection permutation)