Full Disclosure mailing list archives

Blackhole for Bad Bots WordPress Plugin 2.5 - Detection Bypass

From: <gionreale () tutanota com>
Date: Sun, 19 May 2019 12:07:34 +0200 (CEST)


Blackhole for Bad Bots protects your site against bad bots, spammers, scrapers, scanners, and other automated threats.

Version 2.5 fails to avoid fingerprinting by including predictable data within the "blackhole_trigger" . Giving 
attackers the ability to detect and avoid this system.


Discovered by Gionathan Armando Reale

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Current thread:

Blackhole for Bad Bots WordPress Plugin 2.5 - Detection Bypass gionreale (May 21)