WhiteNightShadow/camoufox-reverse-mcp

What it solves

This project provides a specialized Model Context Protocol (MCP) server that enables AI coding assistants (like Cursor, Claude Code, and Cline) to perform advanced JavaScript reverse engineering. It solves the problem of analyzing heavily protected websites that use anti-fingerprinting, obfuscation, and JSVMP (JavaScript Virtual Machine) protections, which typically block standard automation tools.

How it works

The server integrates with Camoufox, a Firefox-based anti-fingerprinting browser that modifies fingerprints at the C++ engine level to remain undetectable. It exposes 35 tools to the AI assistant via the MCP, allowing it to:

• Control the Browser: Navigate, take screenshots, and interact with elements.
• Analyze Scripts: List, search, and retrieve source code from the page.
• Hock and Trace: Inject hooks into functions (using Object.defineProperty to prevent overrides) and trace execution flows.
• Network Analysis: Capture, filter, and intercept network requests and their initiators.
• JSVMP Analysis: Use source-level instrumentation (AST rewriting) and runtime probes to analyze virtual machine-based obfuscation.
• Engine-Level Tracing: Track DOM property access at the C++ level (via a custom camoufox-reverse browser) to see exactly what the JSVMP is reading without being detected.

Who it’s for

• Reverse Engineers: Professionals analyzing complex JavaScript signatures and API parameters.
• Security Researchers: Those studying anti-bot and anti-scraping mechanisms.
• AI-Assisted Developers: Developers using LLM-based IDEs who want to automate the process of uncovering hidden API logic.

Highlights

• C++ Engine-Level Fingerprinting: Unlike JS-level patches, it uses engine-level spoofing to bypass advanced detection.
• JSVMP Toolset: Dedicated tools for AST-based instrumentation and interpreter hooking specifically for VM-based obfuscation.
• Undetectable Property Tracing: Ability to track which DOM properties are accessed by scripts at the engine level, bypassing JS-level detection.
• Persistent Hooking: Hooks are maintained across page navigations.
• Comprehensive Toolset: 35 distinct tools covering everything from network capture to offline signer verification.