uBlockOrigin / uAssets

Resources for uBlock Origin, uMatrix: static filter lists, ready-to-use rulesets, etc.
GNU General Public License v3.0
4.12k stars 767 forks source link

exego.app: detection #21895

Closed Hazuki-san closed 9 months ago

Hazuki-san commented 9 months ago

Prerequisites

URL(s) where the issue occurs.

https://exego.app/H0fOmv

Description

The site detects ad-blockers.

Other extensions used

none

Screenshot(s)

Screenshot(s) ![image](https://github.com/uBlockOrigin/uAssets/assets/27200811/0fdd573f-8722-4fc7-a4c0-7dafd5fc34a6)

Configuration

Details ```yaml uBlock Origin: 1.55.0 Chromium: 120 filterset (summary): network: 135494 cosmetic: 84289 scriptlet: 37534 html: 0 listset (total-discarded, last-updated): added: THA-0: 1468-3, now adguard-generic: 81526-490, now default: user-filters: 9-1, never easylist: 76982-1680, 1h.35m Δ easyprivacy: 43408-128, 1h.35m Δ plowe-0: 3787-1178, now ublock-badware: 7774-317, 7m ublock-filters: 36396-3427, 7m ublock-privacy: 963-7, 7m ublock-quick-fixes: 187-50, 7m ublock-unbreak: 2187-98, 7m urlhaus-1: 10325-0, now filterset (user): [array of 9 redacted] trustedset: added: [array of 11 redacted] switchRuleset: added: [array of 1 redacted] userSettings: advancedUserEnabled: true hiddenSettings: [none] supportStats: allReadyAfter: 434 ms (selfie) maxAssetCacheWait: 233 ms cacheBackend: browser.storage.local popupPanel: blocked: 5 network: arglingpistole.com: 1 asacdn.com: 1 demand.supply: 1 doubleclick.net: 1 googletagmanager.com: 1 extended: ##.steps-to-earn, .flex.share-icons-container, .register-banner,… ##+js(no-fetch-if, pagead2.googlesyndication.com) ##+js(abort-current-script, document.createElement, break;case $… ##+js(addEventListener-defuser, click, handleClick) ##+js(abort-on-stack-trace, Object, /(?=^(?!.*(https)))/) ##+js(set-constant, blurred, false) ```
Hazuki-san commented 9 months ago

Is there something I need to add about this?

Yuki2718 commented 9 months ago

Is there something I need to add about this?

Your Configuration is empty. Provide them.

Hazuki-san commented 9 months ago

My configuration is default config. Using the stock one.

Yuki2718 commented 9 months ago

The destination says

Your link has been generated by another IP address. Please use the same IP.

Is it possible I have to use the same IP? Registered and generated a link, still no detection.

Hazuki-san commented 9 months ago

That's weird, I've tried with multiple IPs. I can still access fine. Is there any error screen I can see?

Yuki2718 commented 9 months ago

Please copy and paste Troubleshooting info in case.

Hazuki-san commented 9 months ago
uBlock Origin: 1.55.0
Chromium: 120
filterset (summary):
 network: 135494
 cosmetic: 84289
 scriptlet: 37534
 html: 0
listset (total-discarded, last-updated):
 added:
  THA-0: 1468-3, now
  adguard-generic: 81526-490, now
 default:
  user-filters: 9-1, never
  easylist: 76982-1680, 1h.35m Δ
  easyprivacy: 43408-128, 1h.35m Δ
  plowe-0: 3787-1178, now
  ublock-badware: 7774-317, 7m
  ublock-filters: 36396-3427, 7m
  ublock-privacy: 963-7, 7m
  ublock-quick-fixes: 187-50, 7m
  ublock-unbreak: 2187-98, 7m
  urlhaus-1: 10325-0, now
filterset (user): [array of 9 redacted]
trustedset:
 added: [array of 11 redacted]
switchRuleset:
 added: [array of 1 redacted]
userSettings:
 advancedUserEnabled: true
hiddenSettings: [none]
supportStats:
 allReadyAfter: 434 ms (selfie)
 maxAssetCacheWait: 233 ms
 cacheBackend: browser.storage.local
popupPanel:
 blocked: 5
 network:
  arglingpistole.com: 1
  asacdn.com: 1
  demand.supply: 1
  doubleclick.net: 1
  googletagmanager.com: 1
 extended:
  ##.steps-to-earn, .flex.share-icons-container, .register-banner,…
  ##+js(no-fetch-if, pagead2.googlesyndication.com)
  ##+js(abort-current-script, document.createElement, break;case $…
  ##+js(addEventListener-defuser, click, handleClick)
  ##+js(abort-on-stack-trace, Object, /(?=^(?!.*(https)))/)
  ##+js(set-constant, blurred, false)
Yuki2718 commented 9 months ago

adguard-generic is not default. But I can reproduce if I disable redirection of pagead2.googlesyndication.com/pagead/js/adsbygoogle.js xhr. Actually, exego.app##+js(no-fetch-if, pagead2.googlesyndication.com) in AG Base is causing detection.

Hazuki-san commented 9 months ago

Alright, I wiped everything to factory settings. It seems to be working fine now.

Yuki2718 commented 9 months ago

@gorhill exego.app##+js(no-fetch-if, pagead2.googlesyndication.com) causes detection only on Chromium with uBO, but with AG it doesn't. Is this related to https://github.com/gorhill/uBlock/commit/e1ae17ed0059f5be488f2d6b7617feeda63e9096 ?

gorhill commented 9 months ago

The following filter is causing the prevent-fetch scriptlet to throw:

exego.app##+js(aost, Object, /(?=^(?!.*(https)))/)

Solution is to use safe Object_defineProperty, which is already declared. It's unrelated to the commit you mention, the exception occurs when setting the url property which has been there since long.


That filter is actually breaking quite a lot of other scriptlets since many of them still use unsafe Object.[...], so they end up throwing.

rrrcabral commented 2 months ago

i also have problem is this site

detyso commented 1 month ago

still ads After Clicking im not a robot it gets redirected to other sites https://exego.app/GdvGUG

ghajini commented 1 month ago

URL = https://exego.app/GdvGUG

there is script on page; In final page that opens popups

<script>
window.shouldOpenPopUp = true;
function openPopup(event) {
  if (window.shouldOpenPopUp) {
    event.preventDefault();
    event.stopImmediatePropagation();
    window.shouldOpenPopUp = false;
    setTimeout(() => {
      window.shouldOpenPopUp = true;
    }, 12000)    // Create and click the link
    const a = document.createElement('a');
    a.href = 'https://cvrtu6ee.pro/?aD1jNzViM2EyYWNiYjdlYWZlYjVjNTQyMGY4ZDg4YjBiMyZ1c2VyPTE5NCZzaWQ9OTImdHlwZT1jJmFkY29kZT0yJnRtcD01&file=exe';
    a.target = '_blank';
    a.style.display = 'none';
    document.body.appendChild(a);
    a.click();
    document.body.removeChild(a);
  }
}
document.body.addEventListener('click', openPopup);
</script>

add

exego.app##+js(acs, navigator, FingerprintJS)
exego.app##+js(aeld)

On firefox , the event listener is not logged on chrome exego.app##+js(aeld, click, open) or exego.app##+js(aeld, click, openPopup) work but not on firefox

@gorhill sorry can you see on firefox ?

gorhill commented 1 month ago

Maybe I am too late to investigate but I am not seeing a difference when following the steps.

ghajini commented 1 month ago

on firefox following filters does not work exego.app##+js(aeld, click, open) or exego.app##+js(aeld, click, openPopup)

on chrome it work

gorhill commented 1 month ago

In neither Chromium or Firefox do I see a match for open when I use exego.app##+js(aeld).

ghajini commented 1 month ago

you are unable to see match because of fix over here https://github.com/uBlockOrigin/uAssets/commit/af23131e65d553fe1c358da3f8cafd5d6ff43e9a

STR=

D4niloMR commented 1 month ago

On my end that script is commented out