🎭 Patchright

#### Patchright is a patched and undetected version of the Playwright Testing and Automation Framework.
It can be used as a drop-in replacement for Playwright. > [!NOTE] > This repository serves the Patchright Driver. To use Patchright, check out the [Python Package](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python) or the [NodeJS Package](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-nodejs). > [!IMPORTANT] > Patchright only patches CHROMIUM based browsers. Firefox and Webkit are not supported. ---

Sponsors

If you’re looking for a high-performance browser automation platform checkout [**Hyperbrowser**](https://hyperbrowser.ai/). It’s ideal for AI Agents, large-scale web scraping and automated testing.
[**Hyperbrowser**](https://hyperbrowser.ai/) delivers cloud-based browser infrastructure that scales instantly from a few sessions to thousands, with built-in CAPTCHA solving, stealth fingerprinting, and a global proxy network. It integrates seamlessly with Puppeteer, Playwright, and Selenium, so you can be up and running in minutes, no server or proxy management required. Key Features: - **Instant scaling**: Launch 1,000+ concurrent browsers - **Captcha Solving**: Handles reCAPTCHA, Cloudflare, AWS, and more - **Stealth mode**: Dynamic, human-like fingerprints for undetectable automation - **Global proxy network**: 170+ countries with rotation and geo-targeting - **Built-in debugging**: Live view and session replay for real-time monitoring - **1-line integration**: Works with Puppeteer, Playwright, Selenium in Node.js or Python 👉 Learn more at [**hyperbrowser.ai**](https://hyperbrowser.ai/) ---

If you are looking for a tool focused on **browser automation and anti-detection mechanisms**, I can recommend [**Scrapeless Scraping Browser**](https://www.scrapeless.com/en/product/scraping-browser?utm_medium=github&utm_campaign=vinyzu-patchright). It’s not only ideal for web scraping, but also perfectly suited for **automated testing, data collection, and large-scale browsing tasks**. As a **cloud-based browser platform**, Scrapeless Scraping Browser lets you instantly scale up to **50–10,000+ concurrent browser instances**—without the hassle of managing servers or proxies. With **stealth mode, real user behavior simulation, and automatic CAPTCHA handling**, it ensures automation is more stable and undetectable. Whether it’s automated testing or complex workflow orchestration, Scrapeless Scraping Browser makes it seamless. Beyond the Scraping Browser, Scrapeless also offers [**Scraping API**](https://www.scrapeless.com/en/product/scraping-api?utm_medium=github&utm_campaign=vinyzu-patchright)**, [Deep SerpAPI](https://www.scrapeless.com/en/product/deep-serp-api?utm_medium=github&utm_campaign=vinyzu-patchright), and [Proxy services](https://www.scrapeless.com/en/product/proxies?utm_medium=github&utm_campaign=vinyzu-patchright).** Key Features: * **Massive concurrency**: Launch 50–10,000+ browsers with one click to run large-scale automation tasks * **Smart anti-detection**: Automatically bypass reCAPTCHA, Cloudflare, DataDome, WAF, and more * **Human-like environment**: Dynamic fingerprint spoofing \+ simulated clicks/scrolls to avoid bot detection * **70M+ residential IP proxies**: Worldwide coverage, auto-rotating, with geo-targeting support * **Low-cost operation**: Proxy costs as low as $1.26–$1.80/GB, below industry averages * **Plug-and-play integration**: Works seamlessly with Puppeteer / Playwright / Python / Node.js / Selenium * **Flexible automation modes**: Automate form submissions, login tests, browsing tasks, and data extraction 👉 Learn more: [Scrapeless Scraping Browser Playground](https://app.scrapeless.com/passport/login?utm_medium=github&utm_campaign=vinyzu-patchright) | [Scrapeless Scraping Browser Docs](https://docs.scrapeless.com/en/scraping-browser/quickstart/introduction/?utm_medium=github&utm_campaign=vinyzu-patchright)

--- ## Patches ### [Runtime.enable](https://vanilla.aslushnikov.com/?Runtime.enable) Leak This is the biggest Patch Patchright uses. To avoid detection by this leak, patchright avoids using [Runtime.enable](https://vanilla.aslushnikov.com/?Runtime.enable) by executing Javascript in (isolated) ExecutionContexts. ### [Console.enable](https://vanilla.aslushnikov.com/?Console.enable) Leak Patchright patches this leak by disabling the Console API all together. This means, console functionality will not work in Patchright. If you really need the console, you might be better off using Javascript loggers, although they also can be easily detected. ### Command Flags Leaks Patchright tweaks the Playwright Default Args to avoid detection by Command Flag Leaks. This (most importantly) affects: - `--disable-blink-features=AutomationControlled` (added) to avoid navigator.webdriver detection. - `--enable-automation` (removed) to avoid navigator.webdriver detection. - `--disable-popup-blocking` (removed) to avoid popup crashing. - `--disable-component-update` (removed) to avoid detection as a Stealth Driver. - `--disable-default-apps` (removed) to enable default apps. - `--disable-extensions` (removed) to enable extensions ### General Leaks Patchright patches some general leaks in the Playwright codebase. This mainly includes poor setups and obvious detection points. ### Closed Shadow Roots Patchright is able to interact with elements in Closed Shadow Roots. Just use normal locators and Patchright will do the rest.
Patchright is now also able to use XPaths in Closed Shadow Roots. --- ## Stealth With the right setup, Patchright currently is considered undetectable. Patchright passes: - [Brotector](https://kaliiiiiiiiii.github.io/brotector/) ✅ (with [CDP-Patches](https://github.com/Kaliiiiiiiiii-Vinyzu/CDP-Patches/)) - [Cloudflare](https://cloudflare.com/) ✅ - [Kasada](https://www.kasada.io/) ✅ - [Akamai](https://www.akamai.com/products/bot-manager/) ✅ - [Shape/F5](https://www.f5.com/) ✅ - [Bet365](https://bet365.com/) ✅ - [Datadome](https://datadome.co/products/bot-protection/) ✅ - [Fingerprint.com](https://fingerprint.com/products/bot-detection/) ✅ - [CreepJS](https://abrahamjuliot.github.io/creepjs/) ✅ - [Sannysoft](https://bot.sannysoft.com/) ✅ - [Incolumitas](https://bot.incolumitas.com/) ✅ - [IPHey](https://iphey.com/) ✅ - [Browserscan](https://browserscan.net/) ✅ - [Pixelscan](https://pixelscan.net/) ✅ --- ## Bugs #### Even though we have spent a lot of time to make Patchright as stable as possible, bugs may still occur. If you encounter any bugs, please report them in the [Issues](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright/issues). #### Patchright is now tested against the Playwright Tests after every release. See [here](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/actions/workflows/patchright_tests.yml) > [!WARNING] > Patchright passes most, but not all the Playwright tests. Some bugs are considered impossible to solve, some are just not relevant. See the list of bugs and their explanation [here](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright/issues/30). #### Based on the Playwright Tests, we concluded that its highly unlikely that you will be affected by these bugs in regular usecases.

Init Script Shenanigans

### Explanation To be able to use InitScripts without [Runtime.enable](https://vanilla.aslushnikov.com/?Runtime.enable), Patchright uses Playwright Routes to inject JavaScript into HTML requests. ### Bugs Playwright Routes may cause some bugs in other parts of your code. Patchright InitScripts won't cause any bugs that wouldn't be caused by normal Playwright Routes.
If you want any of these bugs fixed, you'll have to contact the Playwright team. ### Leaks Patchright InitScripts can be detected by Timing Attacks. However, no antibot currently checks for this kind of Timing Attack and they probably won't for a good amount of time.
We consider them not to be a big risk of detection.

--- ### TODO - [x] Implement Option to choose Execution Context (Main/Isolated). - [x] Fix Fixable Bugs. - [x] Implement .patch Updater to easily show Patchright's patches. - [x] Setup Automated Testing on new Release. - [ ] Implement Patchright on .NET and Java. --- ## Development Deployment of new Patchright versions are automatic, but bugs due to Playwright codebase changes may occur. Fixes for these bugs might take a few days to be released. --- ## Support our work If you choose to support our work, please contact [@vinyzu](https://discord.com/users/935224495126487150) or [@steve_abcdef](https://discord.com/users/936292409426477066) on Discord. --- ## Copyright and License © [Vinyzu](https://github.com/Vinyzu/) Patchright is licensed [Apache 2.0](https://choosealicense.com/licenses/apache-2.0/) [Some Parts](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright/blob/main/patchright_driver_patch.js#L435-L448) of the Codebase are inspired by [Driverless](https://github.com/kaliiiiiiiiii/Selenium-Driverless). Thanks to [Nick Webson](https://github.com/rebrowser/rebrowser-patches) for the idea of .patch-File Documentation. --- ## Disclaimer This repository is provided for **educational purposes only**. \ No warranties are provided regarding accuracy, completeness, or suitability for any purpose. **Use at your own risk**—the authors and maintainers assume **no liability** for **any damages**, **legal issues**, or **warranty breaches** resulting from use, modification, or distribution of this code.\ **Any misuse or legal violations are the sole responsibility of the user**. --- ## Authors #### Active Maintainer: [Vinyzu](https://github.com/Vinyzu/)
Co-Maintainer: [Kaliiiiiiiiii](https://github.com/kaliiiiiiiiii/)