A free client-side cloaking lesson from .... Chrome browser!

[bartosimpsonio]

So...it seems like Chrome is sometimes cloaking its own user agent string depending on what you visit.



Credit to :

https://twitter.com/x/status/1432374809640509444

I always thought cloaking was server side, but this shows that clients also have tricks up their sleeves.

 

[itz_styx]

well its always been possible to fake the user agent with many clients like curl for example:

curl -A "whatever UA you want" http://example.tld

you can also add extensions to chrome that change your UA to other browsers or googlebot.
its just not called cloaking in this case when its done on the client-side, its called "user agent spoofing"

 

[lowridertj]

Need to check all subnets for a major site your trying g to use cloaking for. Like /32 or /13 ip su neta that are owned by Google, Twitter, Facebook, etc..

I've built one. They are tough to xrack and get working right. Can't rely on useragents only.

 

[xReminisce]

Google gotta pretend the other browsers are actually alive and kicking you know !

 

[bartosimpsonio]

Need to check all subnets for a major site your trying g to use cloaking for. Like /32 or /13 ip su neta that are owned by Google, Twitter, Facebook, etc..

I've built one. They are tough to xrack and get working right. Can't rely on useragents only.

Yes but this is for clients tho.

 

[Ike03m]

Need to check all subnets for a major site your trying g to use cloaking for. Like /32 or /13 ip su neta that are owned by Google, Twitter, Facebook, etc..

I've built one. They are tough to xrack and get working right. Can't rely on useragents only.

you've got a URL CLOAKING script? i would like to to develop something like that for me if you are avaliable

 

[itz_styx]

you've got a URL CLOAKING script? i would like to to develop something like that for me if you are avaliable

there are existing solutions already, you don't need to start from scratch as that would take much more time (and money).