Need to differentiate between discordbot crawler and malicious bots (and parser vulnerabilities)
DiscordBot is making requests with a crawler pattern that looks for vulnerabilities with "'" (quotes) at the end of the URL, not HTTPS.
I've tested various URLs in Discord chat and none of them have quotes.
I thought it was a fake crawler, but then I checked discord.com in reverse dns.
I also checked for security holes in the discord parser, since chatting "https://domain.com/adsf/zxcv/'" would normally only link to "https://domain.com/adsf/zxcv/".
1. Check the security hole in the discord parser
2. how to tell if a discord server is real or fake - reverse dns or check api
3. explain the purpose of the crawler and how to distinguish it to https://discordapp.com in the agent.
thank you.
[
{
"ip": "35.227.62.178/32",
"protocol": "http",
"host": "*****",
"path": "/mall/view/goodsNo/133772'",
"agent": "Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)",
"revdns": "178.62.227.35.bc.googleusercontent.com",
"logstamp": 1703427878
},
{
"ip": "35.196.132.85/32",
"protocol": "http",
"host": "*****",
"path": "/mall/view/goodsNo/2677981/categoryNo/4957'",
"agent": "Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)",
"revdns": "crawl-35-196-132-85.ptr.discord.com",
"logstamp": 1661437586
},
{
"ip": "35.237.4.214/32",
"protocol": "http",
"host": "*****",
"path": "/mall/view/goodsNo/2677981/categoryNo/4957'",
"agent": "Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)",
"revdns": "214.4.237.35.bc.googleusercontent.com",
"logstamp": 1661437492
},
]
Yorum yazmak için lütfen oturum açın.
Yorumlar
0 yorum