Who has the auto tumblr follow button java script?

[AceLegend]

I saw it today on a profile, I went to the page then i was automatically following them. Whos got the code? Or who can make it for everyone to share!

 

[T3chnician]

im curious about this as well, although I have yet to see it in action.

 

[KocerRoxy]

send me a pm with the page and i'll reverse engineer it and share it with you for free

 

[Tinyboy]

I would like this too if anyone has it please share! Much appreciated it.

 

[AceLegend]

send me a pm with the page and i'll reverse engineer it and share it with you for free

Thats the problem the page got banned.

 

[Fuggz]

The tumblr follow button can be iframed, so any mouse-follow clickjacking script will work for this.

 

[AceLegend]

The tumblr follow button can be iframed, so any mouse-follow clickjacking script will work for this.

they still have to click on a designated area correct? If so that is not what i saw, I belive it may have been a flash file .swf

 

[Fuggz]

Well then let me know id you find another and I will see how long it will take me to make one for you to use. I don't use tumblr but I am intrigued by this so let me know!

Was it on tumblr itself or an external page?

 

[Kickflip]

I dont think it would be too useful because the accounts would get banned too quickly. I wonder if you could iframe it for someone elses page? So the account getting the follows, isn't the same account with the bad script? This way you get to keep the follows after the accounts get banned. Does that make sense?

 

[AceLegend]

Well then let me know id you find another and I will see how long it will take me to make one for you to use. I don't use tumblr but I am intrigued by this so let me know!

Was it on tumblr itself or an external page?

tumblr itself, Id recommed checking out tumblr. Ive been on the website for 2 days and have posted 200 photos that i uploaded, And i already have 150+ followers and ive gotton 1600+ clicks on my profile.

 

[AceLegend]

I dont think it would be too useful because the accounts would get banned too quickly. I wonder if you could iframe it for someone elses page? So the account getting the follows, isn't the same account with the bad script? This way you get to keep the follows after the accounts get banned. Does that make sense?

Yea thats smarter, And if it got sketchy i would dead the link before anyone could find out.

 

[Fuggz]

tumblr itself, Id recommed checking out tumblr. Ive been on the website for 2 days and have posted 200 photos that i uploaded, And i already have 150+ followers and ive gotton 1600+ clicks on my profile.

Thanks. I am much too busy to start with tumblr now but I may mess around with it when I have extra time.

I dont think it would be too useful because the accounts would get banned too quickly. I wonder if you could iframe it for someone elses page? So the account getting the follows, isn't the same account with the bad script? This way you get to keep the follows after the accounts get banned. Does that make sense?

This would work in theory or else you could get anybodies account banned by posting their tumblr info on a different page. Also by the usual way these type of exploits work, it will probably only be successful to follow the page the visitor is viewing, but there may be ways around that.

Also if someone is intelligent enough to utilize a vulnerability like this I think they would have taken that into consideration before hand, I know I would...

If anyone notices this again send me a message asap preferably through Skype and I will get to the bottom of it.