User Agents - Revision history

>Maxwell at 20:52, 23 March 2009

2009-03-23T20:52:02Z

← Older revision	Revision as of 20:52, 23 March 2009
(No difference)

>Maxwell at 20:52, 23 March 2009

2009-03-23T20:52:02Z

← Older revision		Revision as of 20:52, 23 March 2009
Line 2:		Line 2:

	=Uses of User Agent Spoofing=		=Uses of User Agent Spoofing=
	==Anonymity==		==[[Anonymity]]==

	We can throw off some attempts at being identified by supplying fake User Agents. If the site is looking for someone using Firefox 2.0.12, and you look like Opera 9, they won't notice you. However, this method isn't foolproof. More advanced sites can find out who you are, using methods such as examining your [[HTTP header]]s, or by using Javascript. More info [http://www.net-security.org/dl/articles/browser_ident.pdf here]		We can throw off some attempts at being identified by supplying fake User Agents. If the site is looking for someone using Firefox 2.0.12, and you look like Opera 9, they won't notice you. However, this method isn't foolproof. More advanced sites can find out who you are, using methods such as examining your [[HTTP header]]s, or by using Javascript. More info [http://www.net-security.org/dl/articles/browser_ident.pdf here]

>Maxwell at 06:37, 8 March 2009

2009-03-08T06:37:45Z

← Older revision	Revision as of 06:37, 8 March 2009
(No difference)

>Maxwell at 06:37, 8 March 2009

2009-03-08T06:37:45Z

← Older revision		Revision as of 06:37, 8 March 2009
Line 1:		Line 1:
	User Agents are strings that [[browser]]s send out in order to identify themselves. A User Agent usually identifies the browser version and [[operating system]] being used. This information is sometimes used by websites to control what the user can see. Spoofing a User Agent is extremely simple; the browser just needs to send out a false User Agent string.		User Agents are strings that [[browser]]s send out in order to identify themselves. A User Agent usually identifies the browser version and operating system being used. This information is sometimes used by websites to control what the user can see. Spoofing a User Agent is extremely simple; the browser just needs to send out a false User Agent string.

	=Uses of User Agent Spoofing=		=Uses of User Agent Spoofing=
	==Anonymity==		==Anonymity==

	We can throw off some attempts at being identified by supplying fake User Agents. If the site is looking for someone using Firefox 2.0.12, and you look like Opera 9, they won't notice you. However, this method isn't foolproof. More advanced sites can find out who you are, using methods such as examining your [[HTTP header]]s, or by using [[Javascript]]. More info [http://www.net-security.org/dl/articles/browser_ident.pdf here]		We can throw off some attempts at being identified by supplying fake User Agents. If the site is looking for someone using Firefox 2.0.12, and you look like Opera 9, they won't notice you. However, this method isn't foolproof. More advanced sites can find out who you are, using methods such as examining your [[HTTP header]]s, or by using Javascript. More info [http://www.net-security.org/dl/articles/browser_ident.pdf here]

	==Pretending to be a specific browser/device==		==Pretending to be a specific browser/device==

>Lambda at 13:07, 1 March 2009

2009-03-01T13:07:21Z

← Older revision	Revision as of 13:07, 1 March 2009
(No difference)

>Lambda at 13:07, 1 March 2009

2009-03-01T13:07:21Z

← Older revision		Revision as of 13:07, 1 March 2009
Line 24:		Line 24:
	* [http://www1.qainsight.net:8080/content/binary/AgentStrings20070304.xml AgentStrings20070304.xml (for use with User Agent Switcher)]		* [http://www1.qainsight.net:8080/content/binary/AgentStrings20070304.xml AgentStrings20070304.xml (for use with User Agent Switcher)]

			=Moar=
			* [[HTTP header]]
	[[Category:Methods]]		[[Category:Methods]]

74.63.75.131 at 16:52, 1 December 2008

2008-12-01T16:52:10Z

← Older revision	Revision as of 16:52, 1 December 2008
(No difference)

74.63.75.131 at 16:52, 1 December 2008

2008-12-01T16:52:10Z

← Older revision		Revision as of 16:52, 1 December 2008
Line 1:		Line 1:
	~~UserAgents~~ are ~~user by browsers to let the website~~ that ~~they're visiting who they are, so the site can load~~ browser~~-specific code. However, by [https://addons.mozilla.org/en-US/firefox/addon/59 spoofing~~] ~~our UserAgent, we can trick websites into thinking we are someone else~~. A ~~large list of UserAgents is available~~ [~~http://www1.qainsight.net:8080/content/binary/AgentStrings20070304.xml here~~]. ~~Save as~~ .~~xml,then import it into~~ User Agent ~~Switcher.~~		User Agents are strings that [[browser]]s send out in order to identify themselves. A User Agent usually identifies the browser version and [[operating system]] being used. This information is sometimes used by websites to control what the user can see. Spoofing a User Agent is extremely simple; the browser just needs to send out a false User Agent string.

	~~Spoofing your UserAgent has three main uses~~.

			=Uses of User Agent Spoofing=
	==Anonymity==		==Anonymity==

	We can throw off some attempts at ~~telling who we are,~~ by ~~by pretending to be a different version or browser~~. If the site is looking for someone using Firefox 2.0.12, and you look like Opera 9, they won't notice you. However, this method isn't foolproof. More advanced sites can find out who you are, using methods such as examining your ~~http headers~~, or by using Javascript. More info [http://www.net-security.org/dl/articles/browser_ident.pdf here]		We can throw off some attempts at being identified by supplying fake User Agents. If the site is looking for someone using Firefox 2.0.12, and you look like Opera 9, they won't notice you. However, this method isn't foolproof. More advanced sites can find out who you are, using methods such as examining your [[HTTP header]]s, or by using [[Javascript]]. More info [http://www.net-security.org/dl/articles/browser_ident.pdf here]

	~~==Pretending to be IE==~~

	~~Some sites claim~~ to ~~only work using Internet Explorer. This is usually complete crap, so by changing our UserAgent to IE, we can get around this.~~		==Pretending to be a specific browser/device==

	~~==Gaining Access==~~		Some sites will only display content to users with certain browsers or devices (such as mobile phones). Spoofing the right User Agent is most likely all you need to do in order to gain access to this content.

	Have you ever searched something on Google, clicked a link, and been given an 'access denied' error? The reason for this is that ~~same~~ sites allow Google to access places a normal person can't. We can use this to our advantage, by pretending to be one of Google's spiders, which will allow us to see the protected content. Certain versions of IPB are vulnerable to this, and one major example was the cheating site msxsecurity.com (before it closed down), in which you could gain access o the VIP area with this trick. The UserAgent to use when impersonating Google is:		==Pretending to be a Web crawler==
	Googlebot/2.1 (+http://www.googlebot.com/bot.html)		===Google===
			Have you ever searched something on Google, clicked a link, and been given an 'access denied' error? The reason for this is that some sites allow Google bots to access places a normal person can't, so that the site can still be indexed. We can use this to our advantage, by pretending to be one of Google's spiders, which will allow us to see the protected content. Certain versions of IPB are vulnerable to this, and one major example was the cheating site msxsecurity.com (before it closed down), in which you could gain access to the VIP area with this trick. The UserAgent to use when impersonating Google is:
			Googlebot/2.1 (+http://www.googlebot.com/bot.html)

	~~Examples~~		=Tools=
			==Firefox Add-ons==
			* [https://addons.mozilla.org/en-US/firefox/addon/59 User Agent Switcher]

	* [http://~~www~~.~~thec0re~~.net/~~forum~~/~~index~~.~~php?showforum=89 Warez Movies~~]		=Lists=
			* http://www.user-agents.org/
			* http://www.useragentstring.com/pages/useragentstring.php
			* [http://www1.qainsight.net:8080/content/binary/AgentStrings20070304.xml AgentStrings20070304.xml (for use with User Agent Switcher)]

	[[Category:Methods]]		[[Category:Methods]]

>Hitlerlol: New page: UserAgents are user by browsers to let the website that they're visiting who they are, so the site can load browser-specific code. However, by [https://addons.mozilla.org/en-US/firefox/add...

2008-11-03T22:29:49Z

New page: UserAgents are user by browsers to let the website that they're visiting who they are, so the site can load browser-specific code. However, by [https://addons.mozilla.org/en-US/firefox/add...

← Older revision	Revision as of 22:29, 3 November 2008
(No difference)

>Hitlerlol: New page: UserAgents are user by browsers to let the website that they're visiting who they are, so the site can load browser-specific code. However, by [https://addons.mozilla.org/en-US/firefox/add...

2008-11-03T22:29:49Z

New page

UserAgents are user by browsers to let the website that they're visiting who they are, so the site can load browser-specific code. However, by [https://addons.mozilla.org/en-US/firefox/addon/59 spoofing] our UserAgent, we can trick websites into thinking we are someone else. A large list of UserAgents is available [http://www1.qainsight.net:8080/content/binary/AgentStrings20070304.xml here]. Save as .xml,then import it into User Agent Switcher.

Spoofing your UserAgent has three main uses.

==Anonymity==

We can throw off some attempts at telling who we are, by by pretending to be a different version or browser. If the site is looking for someone using Firefox 2.0.12, and you look like Opera 9, they won't notice you. However, this method isn't foolproof. More advanced sites can find out who you are, using methods such as examining your http headers, or by using Javascript. More info [http://www.net-security.org/dl/articles/browser_ident.pdf here]

==Pretending to be IE==

Some sites claim to only work using Internet Explorer. This is usually complete crap, so by changing our UserAgent to IE, we can get around this.

==Gaining Access==

Have you ever searched something on Google, clicked a link, and been given an 'access denied' error? The reason for this is that same sites allow Google to access places a normal person can't. We can use this to our advantage, by pretending to be one of Google's spiders, which will allow us to see the protected content. Certain versions of IPB are vulnerable to this, and one major example was the cheating site msxsecurity.com (before it closed down), in which you could gain access o the VIP area with this trick. The UserAgent to use when impersonating Google is:
Googlebot/2.1 (+http://www.googlebot.com/bot.html)

Examples

* [http://www.thec0re.net/forum/index.php?showforum=89 Warez Movies]

[[Category:Methods]]