New BitNinja Agent Release 3.17.3: JA4H Whitelists and Configurable CaptchaHttp Challenges

BitNinja Linux Agent 3.17.3 introduces JA4H whitelist and greylist support, configurable JA4H behavior for CaptchaHttp and WAF3, and new CLI commands for managing JA4H entries. The release also includes a migration that flushes the old CaptchaHttp known-bad cache.

JA4H Lists and Challenge Control

BitNinja now supports JA4H whitelists for bypassing checks and greylists for forcing CaptchaHttp challenges. CaptchaHttp JA4H learning is configurable and respects managed challenge fingerprints, giving administrators more control over how these fingerprints affect challenge handling.

WAF3 JA4H Blocking

WAF3 JA4H blocking is now configurable. Global CDN fingerprints can be disabled while local entries remain enabled, allowing the configuration to distinguish between CDN-provided and locally managed fingerprints.

JA4H Command-Line Management

New add-ja4 and del-ja4 CLI commands manage entries across the whitelist, greylist, and blocking lists. These lists are synchronized from the CDN, helping keep JA4H entries consistent across the supported list types.

CaptchaHttp Cache Migration

The release includes a migration that flushes the old CaptchaHttp known-bad cache.

Changelog:

bitninja (3.17.3)

• JA4H management
  • Adds a JA4H whitelist for bypassing checks.
  • Adds a greylist to force CaptchaHttp challenges.
  • Synchronizes the whitelist, greylist, and blocking lists from the CDN.
• CaptchaHttp
  • Makes CaptchaHttp JA4H learning configurable.
  • Ensures CaptchaHttp JA4H learning respects managed challenge fingerprints.
  • Flushes the old CaptchaHttp known-bad cache during migration.
• WAF3
  • Makes WAF3 JA4H blocking configurable.
  • Allows global CDN fingerprints to be disabled while retaining local entries.
• CLI
  • Adds the add-ja4 command to manage entries across all three lists.
  • Adds the del-ja4 command to manage entries across all three lists.

To ensure you’re running the latest version, check your update channel settings in the BitNinja Console using RAU. If you have specific configurations or applications preventing automatic updates, please refer to our documentation for instructions on manual updates and RAU configuration.

If you'd like to read more about previous releases, check the Changelog anytime.

Alternatively, if you would like to see your feature request show up here, don't forget to cast your vote.