Skip to content

User Agents

Tenshi Hinanawi edited this page Apr 28, 2012 · 1 revision

User Agents are strings that browsers send out in order to identify themselves. A User Agent usually identifies the browser version and operating system being used. This information is sometimes used by websites to control what the user can see. Spoofing a User Agent is extremely simple; the browser just needs to send out a false User Agent string.

Uses of User Agent Spoofing


We can throw off some attempts at being identified by supplying fake User Agents. If the site is looking for someone using Firefox 2.0.12, and you look like Opera 9, they won't notice you. However, this method isn't foolproof. More advanced sites can find out who you are, using methods such as examining your HTTP headers, or by using Javascript. More info here

Pretending to be a specific browser/device

Some sites will only display content to users with certain browsers or devices (such as mobile phones). Spoofing the right User Agent is most likely all you need to do in order to gain access to this content.

Pretending to be a Web crawler


Have you ever searched something on Google, clicked a link, and been given an 'access denied' error? The reason for this is that some sites allow Google bots to access places a normal person can't, so that the site can still be indexed. We can use this to our advantage, by pretending to be one of Google's spiders, which will allow us to see the protected content. Certain versions of IPB are vulnerable to this, and one major example was the cheating site (before it closed down), in which you could gain access to the VIP area with this trick. The UserAgent to use when impersonating Google is: Googlebot/2.1 (+


Firefox Add-ons



Bibliotheca Anonoma

Note: This wiki has moved to a new website. Please update your links.


Check the Workroom for content we're still reviewing.





Website Archives


Clone this wiki locally
You can’t perform that action at this time.