Anubis bypass extension - heads up

[xkpx64]

Just a heads up https://gitlab.com/zipdox/anubis-bypass

[Xe]

I'm aware of this. Please send future such things to [email protected]

[guest20]

If I'm reading this right this extension bypasses anubis by just changing the user agent on any host that ever set an anubis cookie?

[thess]

Yup - seen it on my site...

# anubis-bypass seen in the wild

- name: anubis-bypass
  user_agent_regex: (?i)anubis
  action: DENY

[guest20]

Thus solving the problem once and for all

[thess]

N.B.: Bypass extensions now use generated/random UA strings. One extension gets the list of installed sites from known-instances and triggers behavior from that list. It even comes with an update script. The other triggers on page content: "Making sure you are ..."

Friendly ping @Xe