کالبدشکافی TLS Fingerprinting و روشهای دور زدن فایروالهای مدرن (Cloudflare / Akamai)

import asyncio
import random
from typing import Dict, Any, Optional
from curl_cffi.requests import AsyncSession, Response

class StealthHttpClient:
    """
    Production-grade HTTP/2 & TLS Impersonation Client
    Bypasses JA3/JA4 and Akamai HTTP/2 Fingerprinting
    """
    BROWSER_PROFILES = [
        {
            'impersonate': 'chrome124',
            'sec_ch_ua': '"Chromium";v="124", "Google Chrome";v="124", "Not-A.Brand";v="99"',
            'user_agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36'
        },
        {
            'impersonate': 'safari17_0',
            'sec_ch_ua': None,
            'user_agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15'
        }
    ]

    def __init__(self, proxy_url: Optional[str] = None, timeout: int = 20):
        self.proxy_url = proxy_url
        self.timeout = timeout

    def _build_headers(self, profile: Dict[str, Any], extra_headers: Optional[Dict[str, str]] = None) -> Dict[str, str]:
        headers = {
            'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8',
            'Accept-Language': 'en-US,en;q=0.9',
            'Accept-Encoding': 'gzip, deflate, br, zstd',
            'User-Agent': profile['user_agent'],
            'Upgrade-Insecure-Requests': '1',
            'Sec-Fetch-Dest': 'document',
            'Sec-Fetch-Mode': 'navigate',
            'Sec-Fetch-Site': 'none',
            'Sec-Fetch-User': '?1'
        }
        if profile['sec_ch_ua']:
            headers['sec-ch-ua'] = profile['sec_ch_ua']
            headers['sec-ch-ua-mobile'] = '?0'
            headers['sec-ch-ua-platform'] = '"macOS"'
        if extra_headers:
            headers.update(extra_headers)
        return headers

    async def fetch(self, url: str, headers: Optional[Dict[str, str]] = None, max_retries: int = 3) -> Response:
        for attempt in range(1, max_retries + 1):
            profile = random.choice(self.BROWSER_PROFILES)
            req_headers = self._build_headers(profile, headers)

            async with AsyncSession(impersonate=profile['impersonate'], proxies={'https': self.proxy_url} if self.proxy_url else None) as session:
                try:
                    response = await session.get(url, headers=req_headers, timeout=self.timeout)
                    if response.status_code in (403, 429, 503):
                        await asyncio.sleep(1.5 ** attempt + random.uniform(0.2, 0.8))
                        continue
                    return response
                except Exception as exc:
                    if attempt == max_retries:
                        raise RuntimeError(f'Failed after {max_retries} attempts: {exc}') from exc
                    await asyncio.sleep(1.5 ** attempt)

async def main():
    client = StealthHttpClient()
    resp = await client.fetch('[https://tls.peet.ws/api/all](https://tls.peet.ws/api/all)')
    data = resp.json()
    print(f"Negotiated TLS JA3 Hash: {data['tls']['ja3_hash']}")
    print(f"Akamai HTTP/2 Fingerprint: {data['http2']['akamai_fingerprint_hash']}")

if __name__ == '__main__':
    asyncio.run(main())