Modules update.

Author: Maikuolan

modules/module_botua.php

@@ -8,7 +8,7 @@
  * License: GNU/GPLv2
  * @see LICENSE.txt
  *
- * This file: Bot user agents module (last modified: 2025.07.24).
+ * This file: Bot user agents module (last modified: 2025.07.26).
  *
  * False positive risk (an approximate, rough estimate only): « [ ]Low [x]Medium [ ]High »
  */
@@ -210,6 +210,8 @@
         $UANoSpace
     ), 'Backlink/SEO/Scraper UA'); // 2022.09.19 mod 2025.07.24
 
+    $Trigger(preg_match('~zombiebot~', $UANoSpace), 'Backlink/SEO'); // 2025.07.26
+
     $Trigger(strpos($UANoSpace, 'catch') !== false, 'Risky UA'); // 2017.01.13
 
     if ($CIDRAM['Config']['signatures']['block_proxies']) {
@@ -320,15 +322,15 @@
         'a(?:dbar|i2bot|ihitbot|i.?searchbot|liyun|ndibot|nonymous-?coward|wario)|' .
         'b(?:anana-?bot|edrockbot|ot-?test|rands-?bot|rightbot|ytespider)|' .
         'c(?:asperbot|cbot|hinaclaw|lark-?crawler|ohere-)|' .
-        'd(?:atenbank|eep-?research)|' .
+        'd(?:atenbank|eep-?research|iffbot)|' .
         'echobo[tx]|' .
         'f(?:idget-?spinner-?bot|irecrawl|riendly-?(?:crawler|spider))|' .
         'i(?:askspider|magesift|mg2dataset)|' .
         'jaddjabot|' .
         'k(?:angaroobot|eys-?so-?bot)|' .
         'm(?:amac(?:asper|yber)|istral|ozilla/0|ycentralai)|' .
         'n(?:etestate|ovaact)|' .
-        'orbbot|' .
+        'o(?:mgili|rbbot)|' .
         'p(?:angubot|anscient|erplexity|hindbot|hxbot|oseidon|ublicwebcrawler)|' .
         'q(?:ualifiedbot|uillbot)|' .
         'research.?crawler|' .
@@ -341,7 +343,7 @@
         $UANoSpace
     ), 'Scraper UA')) {
         $CIDRAM['Tracking options override'] = 'extended';
-    } // 2023.11.17 mod 2025.07.24
+    } // 2023.11.17 mod 2025.07.26
 
     $Trigger(preg_match('~ct‑git‑scanner/~i', $CIDRAM['BlockInfo']['UA']), 'Unauthorised Git scanner'); // 2025.07.05
 

modules/module_extras.php

@@ -8,7 +8,7 @@
  * License: GNU/GPLv2
  * @see LICENSE.txt
  *
- * This file: Optional security extras module (last modified: 2025.07.22).
+ * This file: Optional security extras module (last modified: 2025.07.26).
  *
  * False positive risk (an approximate, rough estimate only): « [ ]Low [x]Medium [ ]High »
  */
@@ -182,7 +182,14 @@
             $CIDRAM['Reporter']->report([15, 21], ['Caught probing for ' . $Exploit . ' vulnerability.'], $CIDRAM['BlockInfo']['IPAddr']);
         }
 
-        /** Probing for common vulnerabilities and exploits. */
+        /** Probing for common vulnerabilities and exploits (OttoKit/SureTriggers). */
+        if (!$is_WP_plugin || (function_exists('is_plugin_installed') && !is_plugin_installed('suretriggers'))) {
+            if ($Trigger(preg_match('~sure-triggers/v1/automation/action(?:$|[/?])~', $LCNrURI), $Exploit = 'CVE-2025-3102/CVE-2025-27007')) {
+                $CIDRAM['Reporter']->report([15, 21], ['Caught probing for ' . $Exploit . ' vulnerability.'], $CIDRAM['BlockInfo']['IPAddr']);
+            }
+        } // 2025.07.26
+
+        /** Probing for common vulnerabilities and exploits + SQLi. */
         if (
             $Trigger(preg_match('~/services/contributor/1&(?:amp;)?id=1(?:(?:%20|[ +-])(?:union|all|select)|.*(?:null,|md5\\(|--(?:%20|[ +-])?))~', $LCNrURI), $Exploit = 'CVE-2021-24666') // 2025.07.22
         ) {

modules/modules.dat

@@ -203,7 +203,7 @@ module_bgpview.php:
 module_botua.php:
  Name: "Bot user agents module"
  False Positive Risk: "Medium"
- Version: "2025.204.1"
+ Version: "2025.206.0"
  Dependencies:
   PHP: "^5.4|^7|^8"
   CIDRAM Core: "^1.13.1|^2.0.1"
@@ -215,7 +215,7 @@ module_botua.php:
   To:
    - "module_botua.php"
   Checksum:
-   - "a32d612540d773dec4122dcb033036f3d083dc3965a84d637ec96fee3ce3d925:27208"
+   - "1fa1879055a4a4979e2c10942b713ff89faf3c258469a8e53ddfced3e7a49d1a:27309"
  Used with: "modules"
  Reannotate: "modules.dat"
 module_cookies.php:
@@ -239,7 +239,7 @@ module_cookies.php:
 module_extras.php:
  Name: "Optional security extras module"
  False Positive Risk: "Medium"
- Version: "2025.204.0"
+ Version: "2025.206.0"
  Dependencies:
   PHP: "^5.4|^7|^8"
   CIDRAM Core: "^1.13.1|^2.0.1"
@@ -254,7 +254,7 @@ module_extras.php:
    - "module_extras.php"
    - "module_extras.yaml"
   Checksum:
-   - "baac683d8d17fd1aebf277177948eca962b9bb04aeb466d217220dc0dc77c4b9:37564"
+   - "6d6a37ede295ce4562f3e0e40dded87945086e76f19a0be740c800e9570cdc90:38097"
    - "7b891d1fa4b1c52c410220bc758e8cb7064bd6040430fb149a5b60e9ae2e0838:890"
  Used with: "modules"
  Reannotate: "modules.dat"