http-quik: High-Fidelity Stealth Transport Engine

See the CHANGELOG for recent updates and release notes.

http-quik is a specialized HTTP transport library built in Rust, designed for absolute network identity parity with Google Chrome. It provides low-level control over the entire protocol stack—from TLS handshakes to HTTP/2 frame signaling—to ensure that every network interaction is indistinguishable from a real browser.

This crate is a core component of the Phantom Engine ecosystem.

Why http-quik?

Modern anti-bot systems (like Cloudflare, Akamai, and DataDome) use passive fingerprinting to identify automated traffic. http-quik bypasses these systems by enforcing Total Identity Consistency across multiple layers:

• TLS Fingerprints (JA3/JA4): Replicates Chrome's ClientHello using a custom BoringSSL stack, including GREASE, extension permutation, and post-quantum key shares (X25519MLKEM768).
• HTTP/2 Fingerprints (Akamai): Replicates Chromium's SETTINGS frame order, pseudo-header sequences, and connection window increments.
• Cross-Platform Alignment: Automatically aligns the TLS ALPS payload and Client Hints (sec-ch-ua-platform) with the host operating system to prevent p0f mismatches.
• Behavioral Fingerprints: Implements a Chrome-identical redirect state machine that handles sec-fetch-* headers and method rotation.

Core Capabilities

• BoringSSL Integration: Deep FFI bindings for low-level TLS control.
• Chrome 134 Identity: Bit-perfect replication of the latest stable Chrome releases.
• OS Auto-Detection: Defaults to a profile matching the host system (macOS, Windows, or Linux) for out-of-the-box stealth.
• Connection Pooling: Managed H2 session reuse to maintain behavioral consistency.
• Customizable Profiles: Explicitly target specific platforms regardless of the host environment.

Quick Start

Add http-quik to your Cargo.toml:

[dependencies]
http-quik = "0.1.4"

Execute a stealth request with automatic OS detection:

use http_quik::Client;

#[tokio::main]
async fn main() -> Result<(), http_quik::Error> {
    // Auto-detects host OS and uses the matching Chrome 134 profile
    let client = Client::new();

    // Execute a stealth GET request
    let response = client.get("https://example.com").await?;
    println!("Status: {}", response.status());

    Ok(())
}

Target a specific platform manually:

use http_quik::{Client, Platform, profile::chrome_134};

let client = Client::builder()
    .profile(chrome_134::profile(Platform::WindowsX64))
    .build()?;

Documentation

Full API documentation and usage guides are available on Docs.rs.

License

This project is licensed under the Apache License, Version 2.0.