WebRTC IP leak?

At a glance

The community member is working on a project that requires evading detection, and they noticed that their real IP address is leaking through WebRTC when using the default Crawlee Playwright CLI project. They found a commit to the fingerprint-suite that they think should prevent this, but their tests show it doesn't work. The community members in the comments suggest that the issue is a typing problem in Crawlee, which will be fixed in the next release, and recommend using the mockWebRTC option as a workaround. One community member provides a sample configuration with the mockWebRTC option that they say stopped at least one bot detection site from showing their real IP address.

Useful resources

JJeno

Hi, so for the last couple days I am on a quest to evade detection for a project that proved to be quite challanging. As I researched the issue, I noticed that my real IP leaks through WebRTC with a default Crawlee Playwright CLI project. I see a commit to the fingerprint-suite that I think should prevent that, but based on my tests it doesn't. Does it need special setup or anything?

2 comments

LLukas Celnar

Hi @Jeno
It was already discussed here so you can read through it to find more details.
In summary: our types in crawlee were not correct, that part will be fixed in the next release. But its just a typing issue, you can try using the mockWebRTC option.
https://github.com/apify/crawlee/pull/2705

nnew_in_town

It seems, it should be something like this:

Plain Text

    browserPoolOptions: {
        useFingerprints: true,
         operationTimeoutSecs: 30,
        maxOpenPagesPerBrowser: 10,
        closeInactiveBrowserAfterSecs: 200,
        fingerprintOptions: {
            useFingerprintCache: false,
            fingerprintGeneratorOptions: {
                devices: [DeviceCategory.desktop],
                // @ts-ignore
                mockWebRTC: true,

After adding this - at least one of the bot detection sites stopped showing my real IP...

Add a reply

Apify Discord Mirror

WebRTC IP leak?