stealth

Real User-Agent is detectable with <iframe> when using "puppeteer-extra-plugin-stealth". To prevent it use "'--disable-features=site-per-process'" argument for puppeteer.launch(). See explanation: puppeteer/puppeteer#2548

Real screen size is also detectable with iframe, to prevent it I used preload() script.

OS: Windows 10
"puppeteer": 3.0.4
"puppeteer-extra": 3.1

Current implementation of proclist plugin uses win32_ps_list_procs() php function on Windows host.

Therefore, linux implementation is a simple system("ps -a"), which is OPSEC unsafe, an would probably trigger EDR alerts.

A better implementation should avoid relying on system command execution.

Hey mate, real quick when I run the tool in my lab it says "Cred successful (maybe even Admin access!): USER :: PASS " but it doesnt tell me what machines it is. I added a basic

+ '@' + target to each code print statement to make it easier for myself when using it.

I just think its a really good tool and something simple like the above would be a real QoL improvement

When this modal appears the script execution is stopped, it does not execute your next action.
I've encountered this issues on Amazon & Google.
Is there a way to detect and interact with permission, to click on Block or Allow ?

I wanted to make a note of this before I forget

We can leverage device farms for creating fingerprint database / set.
Because we can opt for real devices and would have hundreds to select from (not to mention a simple framework) creating and regenerating profiles from ddump shouldn't be an issue. When I get some free time this week I do plan on doing this.
(on a side note - i do believe one

Testing the proxies for proper dns resolving capabilities (functioning, then ensuring the proxies aren't returning any unexpected responses) may be of interest to some users.