search

Willy-JL / F95Checker

GNU General Public License v3.0
101 stars 16 forks source link

Bypass DDoS-Guard checks #47

Closed Only1P closed 1 year ago

Only1P commented 1 year ago

login_broken.zip

Willy-JL commented 1 year ago

Ok so, DDoS Guard. Great. Thankfully I found this promising bypass so it's just a matter of porting the main logic over into modules/api.py. Actually looks like a decent system, as in it's not some captcha bs or dark magic, its just testing if the "browser" will execute scripts and respond accordingly to the challenge in the page.

Willy-JL commented 1 year ago

Still needs testing, but I'm not sure how I could manually force a DDoS-Guard challenge to be requested. At the very least now if there is a challenge and the bypass fails, the user gets a more useful error message saying that a browser challenge was needed and the bypass failed.

Willy-JL commented 1 year ago

Released in version 10.0, hopefully it actually works lol