The Lab

The LAB #116: Warming an Imperva reese84 cookie, and replaying it without a browser

A tenth of a cent buys thirteen minutes of scraping, from any IP I tried

Sep 24 • Pierluigi Vinciguerra

The LAB #115: Manus at Work - Datadome on Leboncoin.fr

What DataDome's tag really sends and collects, read line by line on leboncoin.fr.

Sep 10 • Pierluigi Vinciguerra

The LAB #114: Manus at Work - Kasada on Nike.com

Using Manus AI to study the Kasada anti-bot protection

Aug 26 • Pierluigi Vinciguerra

THE LAB #113: Obscura browser against Akamai

A 30MB browser and a Radisson deal finder during Oktoberfest

Aug 20 • Pierluigi Vinciguerra

THE LAB #112: Intercepting a Website's Internal API Calls

How I pull a store's catalog from its internal API, by hand and in code.

Jul 30 • Pierluigi Vinciguerra

THE LAB #111: The OSS browser automation stealth benchmark

Fifteen tools against two live bot detectors, and only four passed the strict one.

Jul 23 • Pierluigi Vinciguerra

THE LAB #110: Why Shopee is so hard to scrape

Every route into Shopee hits a different wall. I mapped all of them and got past none.

Jul 16 • Pierluigi Vinciguerra

THE LAB #109: UDP, Proxies, and the WebRTC Leak

The proxy carries the UDP. The browser refuses to hand WebRTC over. We tested every combination to find where your IP actually leaks.

Jul 2 • Pierluigi Vinciguerra

THE LAB #108: How LLMs and Manus AI are transforming bot detection

AI is making faster and cheaper to deobfuscate code. This changes how antibot solutions should be built.

Jun 26 • Pierluigi Vinciguerra

THE LAB #107: Reversing Shopee's native crypto with Ghidra

Shopee hides its crypto in a native library. We read it in Ghidra and rebuild it in Python, byte for byte.

Jun 11 • Pierluigi Vinciguerra

THE LAB #104: Bypassing AWS WAF on IMDB with Scrapling

An hands-on test on tools for TLS spoofing and Scrapling

May 14 • Pierluigi Vinciguerra

THE LAB #103: Bypassing DataDome-Protected Websites in the Agentic Era

Fifteen browser configurations, one tough anti-bot, and only a couple made it to the cart

Apr 30 • Pierluigi Vinciguerra

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts