Abusing redirects

mightybh · Mar 7, 2009

Oh noooo! Spammers are taking advantage of redirects!

http://forums.seo.com/showthread.php?t=3726

What I would like to know is how exactly do they do that? Any ideas?

kieranadvert · Mar 8, 2009

From reading it I found it quite straight forward. Often times sites have redirects for either downloading (getting) files or a script to redirect when a page cannot be found (404). Spammers can exploit this by appending the destination URL as a parameter to the script.

sitey · Mar 8, 2009

I don't know any sites with open redirects like those that were mentioned here, but it's very similar to "search query" sql injection, where you add a link to your site through an sql injection in the search box.

mightybh · Mar 8, 2009

Ah for some reason I thought it might be something different. In that case you might as well go around injecting your links into website footers and redirecting whole domains. That's not so fun and not so legal.

sitey · Mar 8, 2009

How would you suggest injecting your links into a site's footer else than breaking into the backend system?

mightybh · Mar 8, 2009

Most scripts out there are vulnerable. Its very easy to knock up a quick script and start selling it however they are not always secure. You can either keep an eye on latest exploits (Eg. milw0rm.com) or search for one yourself. Obviously you will need some knowledge of coding etc.

-edit-

Oh sorry, I thought it was somebody else asking a question... I'm a bit hungover ATM.

I don't know, I thought there would be some clever way. This is why I was asking.

autosurf23 · Mar 8, 2009

interested in knowing too

Abusing redirects

mightybh

Senior Member

kieranadvert

Newbie

sitey

Newbie

mightybh

Senior Member

sitey

Newbie

mightybh

Senior Member

autosurf23

Registered Member

Main Menu

Marketplace

Making Money

BlackHat World