Ross ROSS = Recommend OSS · open-source software intelligence for agents

sardanioss/httpcloak

Go HTTP client with browser-identical TLS/HTTP2 fingerprinting. Bypass bot detection by perfectly mimicking Chrome, Firefox, and Safari at the cryptographic level (JA3/JA4, Akamai fingerprint, header order). Supports HTTP/1.1, HTTP/2, HTTP/3, sessions, cookies, and proxies. observed · 2026-09-03

github.com/sardanioss/httpcloak · homepage · Go · MIT (permissive) observed · 2026-09-03

Health v2 · maintenance only

61/100

  • Activity 100
  • Release rhythm 35
  • Longevity 17

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 248
  • days_rel: n/a
  • days_push: 0
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1276 stars · 93 forks observed · 2026-09-03

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

httpcloak is a Go HTTP client library that reproduces browser-identical TLS, HTTP/2, and HTTP/3 fingerprints (JA3/JA4, Akamai, header ordering) to bypass bot detection. It ships bindings for Python, Node.js, and .NET via a shared cgo library, with sessions, cookies, and proxy support including MASQUE.

Use cases

  • scrape sites protected by Cloudflare bot detection
  • make requests indistinguishable from Chrome at the TLS level
  • bypass JA3/JA4 fingerprint blocking
  • send HTTP/3 requests with browser-matching QUIC parameters
  • rotate browser presets like chrome-latest or firefox in a scraper
  • use encrypted SNI (ECH) to avoid SNI-based blocking
  • persist sessions with cookies and TLS tickets across processes

When to choose

  • you need HTTP/3 or ECH support that curl_cffi lacks
  • you're blocked by TLS or HTTP/2 fingerprinting on a target site
  • you want one API across Go, Python, Node.js, and .NET
  • you need MASQUE proxying or domain fronting

When to avoid

  • you just need a normal HTTP client with no anti-bot concerns
  • your use case violates a site's terms of service or local law
  • you need a pure-Python or pure-JS implementation without native binaries
  • you require long-term stability guarantees from a mature ecosystem library

Facets

library · maturity active

http-client web-scraping security networking proxy web-development security crawlers developer-tools privacy go python dotnet windows cross-platform tls-fingerprinting ja3 ja4 anti-bot-bypass http2 http3 quic ech browser-impersonation utls curl-cffi-alternative nodejs linux macos

5 sources

Member repositories

RepositoryRoleHealth v2
sardanioss/httpcloakmain61

For agents

markdown · JSON · MCP: product_card(name="sardanioss/httpcloak")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem