New BitNinja Agent Release 3.17.9: Improved CAPTCHA Handling and WAFPro Header Control

BitNinja Linux Agent 3.17.9 improves CAPTCHA challenge protection, adds an option to overwrite the X-Powered-By response header, and refines IP filtering, whitelist cache management, and malware detection. This release is available through the FREQUENT and BETA update channels.

WAFPro

WAFPro now includes an option to overwrite the X-Powered-By header. When enabled, BitNinja replaces existing values with BitNinja, helping mask the backend server technology exposed in response headers.

CaptchaHttp

BitNinja now removes CAPTCHA upload samples directly after reporting a malware hit instead of moving them to quarantine. These samples serve as temporary analysis files rather than customer site files.

The release also introduces a trusted origin mechanism for CAPTCHA challenge redirects. BitNinja stores the original path on the server when the challenge starts and uses it after a successful POST submission. The origin_url field in POST requests is now treated as untrusted, preventing attackers from manipulating the redirect destination.

IpFilter

For NET IP sets, getSize() now returns the total number of IP addresses covered by configured network ranges instead of counting range entries. This provides more accurate information for capacity planning and reporting.

BitNinja also fixes the IP set usage check for the global whitelist.

Shogun

Shogun now runs a daily timer to flush user and global whitelist caches. This removes stale entries and allows changes from external whitelist sources to take effect over time.

MalwareDetection

MalwareDetection removes the strtolower operation during Aho-Corasick matching to reduce memory usage.

Changelog:

bitninja (3.17.9)

• IpFilter
  • For IP NET sets, getSize() now returns the total number of IP addresses covered by the configured network ranges instead of the number of entries.
  • Fixed the IP set usage check for the global whitelist.
• WAFPro
  • Added an option to overwrite the X-Powered-By header with BitNinja.
• CaptchaHttp
  • CAPTCHA upload samples identified as malware are removed directly after reporting the hit instead of being moved to quarantine.
  • Implemented a trusted origin mechanism for CAPTCHA challenge redirects. The original path is stored server-side when the challenge starts and used after a successful POST submission.
• Shogun
  • Added a daily timer to flush user and global whitelist caches.
• MalwareDetection
  • Removed strtolower to reduce memory usage during Aho-Corasick matching.

To ensure you’re running the latest version, check your update channel settings in the BitNinja Console using RAU. If you have specific configurations or applications preventing automatic updates, please refer to our documentation for instructions on manual updates and RAU configuration.

If you'd like to read more about previous releases, check the Changelog anytime.

Alternatively, if you would like to see your feature request show up here, don't forget to cast your vote.