# Introducing Ghostnet v1.1.0 — A Browser Identity Rotation Engine

**URL:** <https://forum.endeavouros.com/t/introducing-ghostnet-v1-1-0-a-browser-identity-rotation-engine/82041>\
**Category:** Applications\
**Created:** [October 19, 2026, 12:45pm UTC](https://forum.endeavouros.com/t/introducing-ghostnet-v1-1-0-a-browser-identity-rotation-engine/82041 "2026-10-19T12:45:38Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![sanjaya](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/sanjaya/32/136918_2.png) [@sanjaya](https://forum.endeavouros.com/u/sanjaya)\
**Post date:** [October 19, 2026, 12:45pm UTC](https://forum.endeavouros.com/t/introducing-ghostnet-v1-1-0-a-browser-identity-rotation-engine/82041/1 "2026-10-19T12:45:38Z")

</div>

**Introducing Ghostnet v1.1.0 — A Browser Identity Rotation Engine**

 ![ghostnet](https://forum.endeavouros.com/uploads/default/original/3X/0/9/09fa47420e10baa59fc3513e28df630bcc803be8.webp)

It’s not a VPN. It’s not a proxy. It’s a device-identity rotation engine.  
I built ghostnet because testing how websites track users was broken.

Every session, it generates a completely new browser identity:

- 🆕 Fresh profile — cookies, localStorage, cache wiped
- 🖥 New fingerprint — canvas noise, WebGL noise, UA, viewport, timezone, locale
- 🌐 New public IP — Tor circuit rotation (NEWNYM) or your own proxy
- 🔁 One command — gn new and you’re a brand-new user to the site

How it works technically:

Tor SOCKS5 on **[127.0.0.1:19050](https://www.linkedin.com/safety/go/?url=http%3A%2F%2F127%2E0%2E0%2E1%3A19050&urlhash=Dmqt&mt=r6udxHZ80hY8O7WbFqaik6exw50YAPbaV3enmEtJoZBh8il5r__b2Irc5kkQjiq8msQmL3W0ST2cQhUTvdXpQEOD0cNp0pcPNQcs3vQvSFuf3d0XtX7rvha1M9w&isSdui=true)** → control port 19051 for NEWNYM signals → Playwright drives Chrome with per-session fingerprint injection (seeded canvas/WebGL noise, randomized UA/platform/viewport/timezone) → new profile directory every rotation → zero storage carryover.  
When a site blocks Tor datacenter exits (Cloudflare-class), ghostnet runs a smart exit ladder: proven exits → country rotation (US→DE→NL→FR) → any exit → direct fallback. Config changes via SIGHUP reload in ~2s, no re-bootstrap.

What this is for:  
✅ Rate-limit testing on your own apps  
✅ Device-ban enforcement verification  
✅ Trial/expiry flow QA  
✅ Anti-abuse logic testing  
✅ Personal privacy — browsing without cross-session tracking

What this is NOT for:  
❌ Creating fake accounts  
❌ Abusing free trials  
❌ Bypassing bans you earned

⚠ Known limitations:

- Tor is slower than direct internet — expect a few extra seconds per page
- Sites CAN detect Tor exits — ghostnet handles this with fallback strategies, but it takes time
- Tor exit traffic is visible to exit node operators — never send passwords over plain HTTP
- Commercial hardware-bound fingerprinting (FingerprintJS Pro-class) can still defeat this at high confidence

Not a VPN. A VPN hides your IP behind one fixed server. ghostnet makes you look like a completely different device every session — new fingerprint, new IP, new identity. VPNs change where you come from. ghostnet changes who you are to the website.

Built with Python + Playwright + Tor. Open source. GPL-3.0.  
[https://github.com/Sanjaya-Danushka/ghostnet](https://github.com/Sanjaya-Danushka/ghostnet)

[preview](https://drive.google.com/file/d/1VMZLD7_RlxjPKBVr9buRfhU_ZmayETO7/view?usp=sharing)