3 ms·
From my experience, it's a completely different problem. For 99% of websites there is no serious behavioral analysis, and when there it's easily bypassable. I
by throwawayadvsec 3y ago
From my experience, it's a completely different problem.
For 99% of websites there is no serious behavioral analysis, and when there it's easily bypassable.
It's as simple as:
wait some random time between 500 and 3000ms before clicking and always make the clicks randomly slightly off from the center of the element
wait for some random time between 50 and 200ms between keystrokes
use ghost-cursor to make realistic movements using bezier curves
Most of the time you get spotted because of some obscure value in some random part of the browser or request headers isn't what it's supposed to be, not because your actions aren't realistic
- OkayPhysicist 3y agoOr, save yourself the hassle of pretending to be using a mouse, by pretending to be using a touchscreen.
- throwawayadvsec 3y agowell it's also pretty hard to simulate a phone, even a lot harder than a browser imo for example I'm pretty sure the GPU/canvas fingerprint can't be faked