Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Schema Change: Add defense #867

Closed
WebBreacher opened this issue Sep 21, 2024 · 3 comments
Closed

Schema Change: Add defense #867

WebBreacher opened this issue Sep 21, 2024 · 3 comments
Assignees

Comments

@WebBreacher
Copy link
Owner

WebBreacher commented Sep 21, 2024

Like @3xp0rt mentioned in #855 , we should be tool/framework agnostic and provide the data so that the downstream tools can parse or ignore as their capabilities allow.

My thought is to add a single element protection to the schema. It would have several values like:

  • cloudflare = Meaning the site is behind CloudFlare's protections
  • userauth = Meaning that a tool may need to authenticate to the site as a valid user to check this entry.
  • captcha = Meaning the site employs some kind of CAPTCHA that may prevent some automated tools from being successful
  • multiple = The site may use multiple defensive measures.
  • other = Anything else

Tool makers could ignore this field and just try to check the site or, if they use certain evasion/checking techniques, could change tool behavior to be more successful in checking the site.

I would be interested in people's thoughts here. And thanks for thinking about this @3xp0rt.

@WebBreacher
Copy link
Owner Author

OK. No comments. We move forward then.

@WebBreacher
Copy link
Owner Author

#879 adds this.

@WebBreacher
Copy link
Owner Author

WebBreacher commented Oct 4, 2024

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant