Ultimate Freedom Protocol

Ultimate Web Freedom Protocol (v9.0.0). Leverages 'Protocol Phantom' (curl_cffi kernel-level TLS impersonation) to bypass DataDome, Cloudflare, and Bilibili....

This package is explicitly designed to bypass WAFs and to take low-level control of local browser instances (CDP takeovers, driver injection, and tunneling). That behavior is coherent with its description but is high-risk: it opens network ports, creates local relays/sockets, writes in user home directories, and includes 'nuclear' operations gated only by environment variables or local lockfiles. Before installing or running: (1) do not run on a production or shared host — isolate it in a VM or disposable container with no sensitive credentials; (2) review and understand any scripts that start daemons, bind 0.0.0.0, or use CDP; change remote-debugging-address so it only binds to localhost if you must run; (3) verify provenance and author identity — the package has no homepage and an unknown source; (4) remove or sandbox any scripts that open relays or accept incoming connections; (5) if you need only benign scraping, consider simpler, well-audited libraries instead. Additional information that would raise confidence: an authoritative upstream repo/homepage, a reproducible, minimal install process (no daemonization), explicit manifest of all runtime effects, and proof that remote endpoints are never bound to non-loopback interfaces.

Type: OpenClaw Skill Name: ultimate-freedom-protocol Version: 9.0.0 The bundle provides advanced web scraping tools designed to bypass anti-bot protections (DataDome, Cloudflare) using 'Protocol Phantom' (curl_cffi) and DrissionPage. It contains several high-risk components, including a TCP relay (python_relay.py) that forwards the Chrome DevTools Protocol (CDP) port, scripts for raw CDP takeover (force_takeover.py, nuclear_option.py), and shell scripts (daemon_chrome_v2.sh) that expose the browser's remote debugging port on 0.0.0.0. While the stated intent is scraping, the inclusion of 'Nuclear' options, network listeners, and complex custom 'security' wrappers using Unix Domain Sockets (sota_core.py) creates a significant attack surface. The presence of hardcoded user paths (/home/jiahao/) and references to external VPS IPs (198.23.155.120) further indicates a lack of standard security hygiene.