Skip to first unread message
Avipsa Nayak
May 13, 2016, 8:19:44 AM5/13/16
to phantomjs
Hey Guys,
I am a new-bee in PhantomJS. I came across the following scenarios where PhantomJS can win and lose.
|
|
PHANTOMJS |
WEBSITE |
|
“User-agent” via HTTP |
Win |
Lose |
|
Client-side User-agent check |
Win |
Lose |
|
Inspect PluginArray |
Lose |
Win |
|
Timed alert() |
Lose |
Win |
|
HTTP Header order |
Win |
Lose |
|
window.callPhantom |
Win |
Lose |
|
HTML5 features |
Lose |
Win |
|
Function.prototype.bind |
Win |
Lose |
|
Stack trace |
Lose |
Win |
Just wanted to confirm if the latest version of PhantomJS still loses in the areas mentioned above.
Is spoofing the following information still not possible?
- HTML5 features
- Stack Trace generated by PhantomJS
- Plugin information
- Timed alert
References: http://www.slideshare.net/SergeyShekyan/shekyan-zhang-owasp, http://engineering.shapesecurity.com/2015/01/detecting-phantomjs-based-visitors.html
Thanks,
Avipsa
Reply all
Reply to author
Forward
0 new messages