question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

New malign User-Agent

See original GitHub issue

_Issue originally created by user dune73 on date 2017-09-25 07:45:21. Link to original issue: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/904._

Just saw the following UA the first time for real.

We should add it to our list:

struts-pwn (https://github.com/mazen160/struts-pwn)

Heads-up to to mazen160 for using a distinct UA for his scanner by default. Thank you man!

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:6

github_iconTop GitHub Comments

1reaction
CRS-migration-botcommented, May 13, 2020

User mazen160 commented on date 2017-09-25 20:03:28:

Me too! 😃 I will let you know how the process is going tomorrow

0reactions
CRS-migration-botcommented, May 13, 2020

User spartantri commented on date 2018-01-12 11:12:14:

Added to scanners-user-agents.data

Read more comments on GitHub >

github_iconTop Results From Across the Web

New malign User-Agent · Issue #904 · SpiderLabs/owasp ... - GitHub
Exactly my thinking. I saw it used by an IP in Thailand. Can't tell you about the service unfortunately. All reactions.
Read more >
User agent : KOCMOHABT - WebmasterWorld
This morning I noticed a new (to me) User Agent : KOCMOHABT (https://kozmonavt.ml/) Mozilla/5.0 (Web Explorer)
Read more >
CSRF Bypass using User-Agent
An attacker could only 'fake' the user agent via a XSS, or a malign browser extension (or browser).
Read more >
Mazin Ahmed on Twitter: "@ChrFolini Awesome to see that too! :D I ...
New malign User-Agent · Issue #904 · SpiderLabs/owasp-modsecurity-crs. Just saw the following UA the first time for real. We should add it to...
Read more >
How to Identify Bad Bots | Nexcess
As a site administrator, there is something you need to be aware of: bots. Bots account for more than half of all web...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found