Bypass Bot Detection
Summary: PortSwigger Research lists a Burp Suite extension, authored by Zakhar Fedotkin, that mutates ciphers to bypass TLS-fingerprint based bot detection. The extension changes network settings under Settings -> Network -> TLS to select "Use custom protocols and ciphers," modifies those settings during brute force attacks, and per its own listing cannot bypass aggressive bot detection.
What you should know: A tool that alters TLS fingerprints to slip past bot detection is available as a Burp extension, so controls that rely on TLS fingerprinting alone are being tested against a published bypass.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026