PhantomJS Hide & Seek

[Avipsa Nayak]

Hey Guys,

I am a new-bee in PhantomJS. I came across the following scenarios where PhantomJS can win and lose.

	PHANTOMJS	WEBSITE
“User-agent” via HTTP	Win	Lose
Client-side User-agent check	Win	Lose
Inspect PluginArray	Lose	Win
Timed alert()	Lose	Win
HTTP Header order	Win	Lose
window.callPhantom	Win	Lose
HTML5 features	Lose	Win
Function.prototype.bind	Win	Lose
Stack trace	Lose	Win

Just wanted to confirm if the latest version of PhantomJS still loses in the areas mentioned above.

Is spoofing the following information still not possible?

1. HTML5 features
   
2. Stack Trace generated by PhantomJS
3. Plugin information
4. Timed alert

References: http://www.slideshare.net/SergeyShekyan/shekyan-zhang-owasp, http://engineering.shapesecurity.com/2015/01/detecting-phantomjs-based-visitors.html

Thanks,

Avipsa