Change Referrer to anything - Testing it out

[hardsoft]

I have some code that will allow me to change the referrer to anything i want. Ive tested it out and it seems to work. But i dont have any experience in coding or how to make sure it works 100% of the time and what not. The code is in PERL.

Anyways...

Click Here To Test

As you know, the referrer SHOULD be coming from black hat world... but if you look, the referrer is something different to what i changed it to.

I just need someone that is an experienced coder to check it out, and see if it really does what i think it does.

 

[hardsoft]

also, please post if the test worked or did not work for you.

 

[InfoPIP]

Worked for me. Looks like you've hit something good. Be sure to hit me up with a copy of the script. I need it bad!

 

[Essential Clix]

I think I have a copy of this script as well

 

[roguehat]

Yes a few have it due to a membership

 

[catspurley]

Worked for me buddy, nice!

 

[extra]

can u post the script??

 

[ccpro]

nice, it worked for me

can you share the script

 

[joejoe1234]

seems to work but who knows it could be javascript changing the values on the webpage?? send me a copy and I will let you know if it is for real and how good it is.

 

[mmwus]

i'd like a copy ... would be better than the referrer script i'm using if it totally change to whatever you want. thanks.

 

[bhnoobz]

yeah wow, so you proxied a request through your server.. so now all traffic will show up from your server's IP..

 

[hardsoft]

he's got you all fooled lol. unless I am mistaken this simply uses socket and or serverside proxy to change the referer. I posted this proof of concept back in april. u can do this in perl, php, or htacees modification.

First of all... im not trying to fool anyone here lol. As i said, im not a coder so i dont know if this is the real deal or not. I wanted verification that it works (from someone with experience) before i used it myself.

Anyways, ive received a few PM's stating that they have the very same "script" as me (it was posted in a private membership forum) and that i would be an idiot to share it. Im not here to cause drama, i just wanted some help and verification.

 

[goawayplease]

It's not hard for a server side application to change the Referrer as this is an environmental variable available to the server, and thus to all server side code. In the case of PHP it's as easy as tossing:

header("Referrer: myspoofedheader.com");

into your script. This doesn't mean that using this, and then applying a PHP Redirect header is going to feed your spoofed referrer to the target site.

The problem with spoofing the referrer that a foreign environment receives is that this has to be done before reaching the target, or through running malicious code on the target. The major reason being each server environment has access to it's own variables, and outside scripts aren't typically allowed to arbitrarily edit them.

 

[BozoClown]

Unless you are to carefully and cleverly use this script as some form of middleman, it only fools itself.

 

[JohnDoe]

also, please post if the test worked or did not work for you.

I posted some example code that does this in another thread I would read the replies on why this method is not as hot as you think it is

<?php


// The domain we want to connect to

$host = "www.scanmybrowser.com"; 

// Page we want to POST or GET

$page = "index.php";

// The list of our fake referer urls

$file = "urls.txt";
$fp = file($file);
srand((double)microtime()*1000000);
$urls = $fp[array_rand($fp)];



// construct a header for our request still need to add all headers and random user Agents

$hdrs = array( 'http' => array(

    'method' => "GET",



    'header'=> "accept-language: en\r\n" . 

        "Host: $host\r\n" .

		"User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:x.x.x) Gecko/20041107 Firefox/x.x\r\n" .

		"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n" .

		"Referer: $urls\r\n" .  // Setting the http-referer

        "Content-Type: text/html\r\n" .

        "Content-Length: 33\r\n\r\n" .

		"Keep-Alive: 300\r\n"

    )

);



// get the requested page from the server

// with our header as a request-header



$context = stream_context_create($hdrs);

$fp = fopen("http://" . $host . "/" . $page, 'r', false, $context);

fpassthru($fp);

fclose($fp);

?>

 

[Rambo]

I know what you meant Gen

 

[goodfor]

did you ever get to verify if this worked?

 

[ziaon]

Ya, I second that... I'm curious as I'm working on my own idea for using this type of script?
I'm a developer and developing such a script, I will post back with my results, findings, and success!

 

[zen19]

Dont bump old dead threads. Make new ones, and make sure you make them good.

If anyone posts a one liner thread following this i'm giving out an infraction. You were warned.