Comments (3)
KyranRana
commented on July 16, 2024
I don't see how it is a security risk as the regex which tracks the arithmetic picks up only symbols?
The only key which is set is $params['jschl_answer'] and if the code executes properly it should ALWAYS be a number. Could you give me an example of how an attacker could exploit using only symbols such as ()[]+!*=+/ ?
Yea they can possibly break the code but it will just trigger the catch clause.
Refer to: https://github.com/KyranRana/cloudflare-bypass/blob/master/v2/src/CloudflareBypass/CFBypass.php#L83
from cloudflare-bypass.
josiasmontag
commented on July 16, 2024
Thanks for clarifying. I did not notice that the regex is so specific.
from cloudflare-bypass.
KyranRana
commented on July 16, 2024
Not a problem. The documentation will be coming soon. I am just busy at the moment.
from cloudflare-bypass.
Related Issues (20)
- dont work with 7.3.3 - solution
- Now broken HOT 11
- Class 'SimpleJavaScriptCompilation\Model\Context' not found in ../libraries/CloudflareBypass/Model/UAM/UAMPageFormParams.php:57 HOT 1
- blank page
- broken again HOT 1
- '[ERROR] Captcha (retry: 1) -> not supported! Unknown error -> Captcha page is not supported!' or ' [ERROR] UAM (retry: 0) -> clearance cookie missing!' HOT 9
- Unknown error -> --> [Captcha] ERROR. captcha page found. No implementation exists for this yet! HOT 8
- [pity no help on this] How to correctly install the project HOT 1
- Fatal Error
- Unknown error
- Doesnt seem to be working?
- Not working HOT 11
- Call to a member function getDataType() on null HOT 18
- Why do you public this repo? HOT 5
- UAMPageFormParams Error
- Argument 2 passed to CloudflareBypass\Model\UAM\UAMPageFormParams::__construct() must be of the type string, null given, called
- The requested package kyranrana/cloudflare-bypass master is satisfiable by kyranrana/cloudflare-bypass[dev-master] but these conflict with your requirements or minimum-stability.
- Not working HOT 9
- Fix2020-05-24 HOT 57
- infinite loop of retries HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cloudflare-bypass.