jspenguin2017 / uBlockProtector

An anti-adblock defuser for Nano Adblocker and uBlock Origin
GNU General Public License v3.0
740 stars 83 forks source link

ur.ly, linx.cloud, jzrputtbut.net, urly.mobi #615

Closed harryqt closed 7 years ago

harryqt commented 7 years ago

Test link : http://ur.ly/xNwnJzx

Screenshot of the web page : Phase 1) - http://prntscr.com/gq7apa Phase 2) - http://prntscr.com/gq7b0s

Problems: 1) Site Opening tons of annoying pop-ups. 2) The site use different algorithm different times. meaning sometimes they show captcha (which I belive can be bypassed), I believe they have 3-4 templates, they all runs randomly, try reload the page 2-3 times, it will show up.

=======================

Test link : http://linx.cloud/mick-s02e01-720p-hdtv-2ch-x265-hevc-psa-87456/

Linx.cloud has been patched before, but I believe they changed something, for that, I have to click "show links" 5-6 times, before the actual content shows up.

=======================

Test link : http://www.jzrputtbut.net/AsrQH

Patch the 5 sec timer? then redirect to destination automatically?

=======================

Test Link : http://urly.mobi/xNwnJzx - http://prntscr.com/gq7ptf

Sometimes captcha appears, which I believe can be patched.

uBlock-user commented 7 years ago

http://ur.ly/xNwnJzx redirects me to http://linx.cloud/mick-s02e01-720p-hdtv-2ch-x265-hevc-psa-87456/ and then the entire page is broke because of a blocked XHR to http://piguiqproxy.com/api

uBlock-user commented 7 years ago

ur.ly can be bypassed though and doesn't have any reCaptcha from Google. linx.cloud on the other hand runs this nasty script which tries to connect to http://piguiqproxy.com/api

harryqt commented 7 years ago

@uBlock-user ur.ly uses 2-3 algorithms. Sometimes direct redirect, sometimes captcha, sometimes skip page.

uBlock-user commented 7 years ago

Which algorithms ? I only see a fake ad CSS selector named ##.captcha-container

harryqt commented 7 years ago

@uBlock-user Take a look - http://prntscr.com/gq7mdj

uBlock-user commented 7 years ago

That doesn't appear on my end and on clicking Skip AD twice I get redirected to linx.cloud.

For linx.cloud - linx.cloud##script:inject(abort-on-property-read.js, performance)

uBlock-user commented 7 years ago

This is what I see

harryqt commented 7 years ago

that filter worked. btw, i'm sorry, the captcha was appearing on urly.mobi - http://urly.mobi/xNwnJzx I guess they sometimes redirect urls to their alias domain.

uBlock-user commented 7 years ago

Okay, clicking twice doesn't redirect me but opens another page with a 5 sec timer

and when I click skip ad the third time I get tolinx.cloud

uBlock-user commented 7 years ago

@jspenguin2017 can bypass ur.ly as there's no Captcha.

I can reproduce anti adblock notice on http://jzrputtbut.net/AsrQH

harryqt commented 7 years ago

@uBlock-user Check my updated comment. Any filter for blocking pop-up for ur.ly ?

uBlock-user commented 7 years ago

Also has a 5 sec timer

AA script - http://www.linkbucks.com/scripts/intermissionLink.v13.js

@Dibbyo456 I don't get any popups on ur.ly but you can try using this - ur.ly##script:inject(abort-on-property-read.js, open)

uBlock-user commented 7 years ago

http://urly.mobi/xNwnJzx is the same, I get redirected to linx.cloud, no reCapcha is shown although connect request to google.com/recaptcha does appear via logger.

Also jzrputtbut.net/AsrQH can be bypassed so need to patch the aa script.

jspenguin2017 commented 7 years ago

ur.ly got an update, fixed. Can't reproduce the problem with urly.mobi. Can't reproduce the problem with linx.cloud. jzrputtbut.net fixed.

adreporter commented 6 years ago

@jspenguin2017 http://www.jzrputtbut.net/nnc1 After clicking on "SKIP THIS AD":

przechwytywanie przechwytywanie1
jspenguin2017 commented 6 years ago

Hum, the timer seems to be validated on server side now.

Infinitay commented 6 years ago

Is there a bypass for Linx.Cloud? Sorry if it's the wrong place to ask

jspenguin2017 commented 6 years ago

I think no...