Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@ctrl/cloudflare
Advanced tools
Bypass Cloudflare's anti-bot page also known as I'm Under Attack Mode
Bypass Cloudflare's anti-bot page also known as I'm Under Attack Mode
Based on python library cloudflare-scrape
The anti-bot page requires a JS obfuscated math problem and http form submission after a setTimeout. The setTimeout is required, so bypassing cloudflare takes about 6 seconds.
npm install @ctrl/cloudflare
This package is meant to be used with got. After a failed request, use the catchCloudflare
function to resolve your request.
Requires passing cookiejar to got. Reusing the cookiejar in subsequent requests will bypass the cloudflare anti-bot page, until the cookie expires.
Call catchCloudflare(err, options)
passing the error and the options used to make the request. catchCloudflare
will rethrow if it is unable to bypass of if the error is not cloudflare related.
import { catchCloudflare } from '@ctrl/cloudflare';
import got from 'got';
import { CookieJar } from 'tough-cookie';
// example helper function
async function main() {
// cookie jar is required! speed up future requests by keeping a persistant cookie jar
const cookieJar = new CookieJar();
const options = {
// use "url: to describe path
url: 'https://rlsbb.ru/support-us',
cookieJar,
// either disable retry or remove status code 503 from retries
retry: 0,
};
let res: got.Response<any>;
try {
// success without cloudflare?
res = await got(options);
} catch (error) {
// success with cloudflare?
res = await catchCloudflare(error, options);
}
return res.body;
}
FAQs
Bypass Cloudflare's anti-bot page also known as I'm Under Attack Mode
We found that @ctrl/cloudflare demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.