topic Re: Securly bypass - new or old? in Peer-Peer Topics

Securly bypass - new or old?

kuhnd — Thu, 12 Oct 2023 16:08:07 GMT

Not sure if this is a new Securly bypass or an old one I missed.

So I noticed a few kids visiting this site: securlypass.com and other variations.

Once on the site, they drag the button to a new tab, and then they have a switch to turn on & off the Securly extension.

During my short testing, if they turn it off, it will remain off even after a restart.
Securly just started blocking securlypass.com the other day. However, I am sure there are many websites that will do the same thing.

I just posting to give a heads-up and see if there is anything I missed on my end.

Re: Securly bypass - new or old?

Kim_Nilsson — Thu, 12 Oct 2023 16:24:18 GMT

What does it actually do?

Re: Securly bypass - new or old?

kuhnd — Thu, 12 Oct 2023 18:21:08 GMT

It makes the Securly filter stop working. I do have javascript&colon;//* blocked from last year. Which stopped the bookmark version.

Here are a couple of sites that do the same thing

Here is what you move into the new tab: It looks to point to the Securly extension and then a category but not sure which one.

chrome-extension://iheobagjkfklnlikgihanlhcddjoihkg/blocked.html?category=PHN0eWxlPip7dmlzaWJpbGl0eTpoaWRkZW59PC9zdHlsZT4KICAgIDxpZnJhbWUgc3JjZG9jPSI8c2NyaXB0IHNyYz0nYmxvYjpodHRwczovL3d3dy5kaXNhYmxlc2VjdXJseS5jb20vZWY3ZDM4NDUtZDBkZC00NTZiLTljMTMtODcyOTk2NjIxMTkyJz48L3NjcmlwdD4iPgogICAgICAgIEhpLiBJZiB5b3UgY2FuIHJlYWQgdGhpcywgdGhlIGV4cGxvaXQgZGlkbid0IHdvcmsuCiAgICAgICAgV2FpdCBhIGNvdXBsZSBvZiB3ZWVrcy4gV2UnbGwgYmUgYmFjay4uLgogICAgPC9pZnJhbWU%2B

Re: Securly bypass - new or old?

rdnixon — Thu, 12 Oct 2023 18:30:19 GMT

Appear to be blocked as far as I can see. You can also bung them in your url blacklist.

Re: Securly bypass - new or old?

kuhnd — Thu, 12 Oct 2023 19:12:13 GMT

I contacted Securly support and was told it was a known issue the developers were working to resolve. So for now, all someone has to do is create another website or URL and the issue will continue. I was hoping to figure out a stop for now. In the securly filter admin side, you can see when the students drag into the new tab. I tried to block that in securly which works but it is too slow. One still has time to flip the switch and turn off Securly before the block kicks in.

Re: Securly bypass - new or old?

Matthew_Winrich — Thu, 12 Oct 2023 19:19:55 GMT

Could you add the same block in the URL Block list in Google Admin Console. I think Chrome might check the URL against the block list before loading the page with would stop it before they can turn Securly off.

Admin Console -> Devices -> Chrome -> Settings -> User & Browser -> Blocked URLs

Re: Securly bypass - new or old?

rdnixon — Thu, 12 Oct 2023 19:26:50 GMT

Yep you can do that. However, I've not managed to get any of these links to do anything myself. URL Blacklist is a good place for problem things.

Re: Securly bypass - new or old?

kuhnd — Thu, 12 Oct 2023 19:51:45 GMT

When you say you can not get the links to do anything. What are you seeing on your end? Are you seeing them blocked? I believe Securly might have blocked them now. I could not get them to do anything on my regular computer. However, when using a Chromebook with a test student, it worked for me.

Re: Securly bypass - new or old?

rdnixon — Thu, 12 Oct 2023 20:02:14 GMT

Directly visiting chrome-extension://iheobagjkfklnlikgihanlhcddjoihkg/blocked.html?category=PHN0eWxlPip7dmlzaWJpbGl0eTpoaWRkZW59PC9zdHlsZT4KICAgIDxpZnJhbWUgc3JjZG9jPSI8c2NyaXB0IHNyYz0nYmxvYjpodHRwczovL3d3dy5kaXNhYmxlc2VjdXJseS5jb20vZWY3ZDM4NDUtZDBkZC00NTZiLTljMTMtODcyOTk2NjIxMTkyJz48L3NjcmlwdD4iPgogICAgICAgIEhpLiBJZiB5b3UgY2FuIHJlYWQgdGhpcywgdGhlIGV4cGxvaXQgZGlkbid0IHdvcmsuCiAgICAgICAgV2FpdCBhIGNvdXBsZSBvZiB3ZWVrcy4gV2UnbGwgYmUgYmFjay4uLgogICAgPC9pZnJhbWU%2B

Produces a page is blocked message from Chrome. Try to visit a site blocked by Securly and its still blocked. So no obvious effect at all. This is on ChromeOS. Source sites are all blocked.

Re: Securly bypass - new or old?

kuhnd — Thu, 12 Oct 2023 20:15:38 GMT

Thanks for responding. I get a red page for a second and then the INSECURLY exploit pops up on my end. I wonder if I am missing something on my end. I try to go through and add blocks and things where I hear about them but I must be missing something.