ADVANCED Black Hat Public Proxy Technique

bartosimpsonio · Jan 4, 2015

With this technique you can get infinite social signals and basically add javascript code so client browsers using your proxy do anything you want. This is probably as black hat as it gets and it's 100% legal since the proxy is being used for free.

The idea is pretty simple:

[Server] Install Squid on a linux server
[Payload] Modify the server so all transmitted javascript files will get one extra piece of code that does things like send all data entered in forms to your server
[Cache] Set the caching time of the modified .js files as high as possible

Source : https://blog.haschek.at/post/fd9bc

What can you do with this?

Set up free proxies on VPS's and then post the proxies to black hat forums. People start using your proxies. Every javascript file that passes through the proxy, you program de proxy to add code to them, code like

Code:

function add_some_likes()

or

Code:

function substitute_ads_for_my_ads

or maybe

Code:

function popunder_traffic_send()

.

Be creative!

Since the "client" is using your proxy, paid with your money, from your resources, there is nothing illegal in this. The "extra" javascript is simply the toll fee.

Enjoy the best walk you ever had laughing your way to the bank

tony_d · Jan 4, 2015

Good share bartosimpsonio! I'm sure some will have a field day with this...

TheSnowman · Jan 4, 2015

That's basically man-in-the middle attack... I'm not sure if this is really completely legal.

qrazy · Jan 4, 2015

It's more like a basic botnet technique which has been used for years, I don't think it is legal..

bartosimpsonio · Jan 4, 2015

qrazy said:
It's more like a basic botnet technique which has been used for years, I don't think it is legal..

The proxy belongs to you and is paid by you...the person is using your proxy for free....if they don't wish to have that code, then they should pay for their proxies.

This is completely different from hacking and installing malware on random people's computers. This is more like seeing ads in exchange for using a service.

StaceyJ · Jan 4, 2015

Well using this kind of technique is not worth. So i would also don't say it as legal.

tony_d · Jan 4, 2015

bartosimpsonio said:
The proxy belongs to you and is paid by you...the person is using your proxy for free....if they don't wish to have that code, then they should pay for their proxies.

This is completely different from hacking and installing malware on random people's computers. This is more like seeing ads in exchange for using a service.

Indeed - and a simple TOS page that reserves your right to 'modify content before retransmitting to the user' would mean the user aquiesces and therefore (tacitly at least) gives permission.

laowai · Jan 4, 2015

I guess that legality would also depend on what the injected script would do.

What comes to monetizing this method maybe I cannot think enough outside of the box, but wouldn't every like/ad click/whatever has always same IP, your proxy IP, so it wouldn't fly too long.

ficfroc · Jan 4, 2015

Lol barto, I just read this on reddit and was alredy thiking about the same technique.
Notz that some online free proxies are already exploiting this legally to serve some adsense ads .

CyHead · Jan 4, 2015

The legality is questionable, but not in the way most are bringing up.

The OP has a point that he's running a service and as part of the terms of usage, you agree that your information might be logged and that it might modify the data. All of that is pretty legal (assumes that users have seen a privacy policy disclosure or terms of service - that could be done by injecting in a header on to the page).

The part where it gets legally grey is between the service and websites - many big sites have a disclaimer or terms of use that forbids bots or third-party services from accessing them or modifying the site's code. I'm pretty sure FB would have something like this saying "you can't scrape or edit or republish or modify the publication of our site/code" - basically means you can display the site or 'proxy' it , but not modify the output they push out to users.

Still it's a blackhat method and I'm sure this would really work - lots of users around the world, and best of all these would be legit users - so real followers and friends.

Biggest con to me is that you're basically running a proxy and people can misuse it for spam and malware and just about anything else, so you have to balance that out.

fistor · Jan 4, 2015

This is illegal. Just because you own something does not mean you can infest people without their knowledge.
If you own a website, do you really think you can inject people with a bank keylogger, and that's fine, because "they should just not have used your website"?

The second point being the proxy you are providing. You have the VPS, the IP in question is under your control. Everything that passes the proxy is under your responsibility. And don't you even start to think it would only be spam. You'll be happy for spam, people use fast public proxies for worse stuff, far worse.

accelerator_dd · Jan 4, 2015

fistor said:
This is illegal. Just because you own something does not mean you can infest people without their knowledge.
If you own a website, do you really think you can inject people with a bank keylogger, and that's fine, because "they should just not have used your website"?

The second point being the proxy you are providing. You have the VPS, the IP in question is under your control. Everything that passes the proxy is under your responsibility. And don't you even start to think it would only be spam. You'll be happy for spam, people use fast public proxies for worse stuff, far worse.

While that may be true, if you have a website where you give away the proxy for free, and put a disclaimer saying that you will be injecting that Javascript, you are not doing anything illegal or even unethical. Now, if someone scraping sites via google finds your proxy and uses it, it's their fault, not yours. If someone posts it on a forum and other people use it, same applies.

What I would assume to be an issue is 100s of FB/Twitter/whatever accounts liking the same thing or even logging in from the same IP.

snarky · Jan 4, 2015

This kind of packet injection has been practiced by some large corporations for some time. Here's a company I love to hate:

http://www.dslreports.com/shownews/90134

playerb · Jan 4, 2015

some of you seem to be missing the point; when you set the cache of the js at some random date in the future, when the user disconnects from your proxy, and goes back to their normal internet connection, they still have that cached version of the js. so whenever they visit the site it's from, their browser loads the cached version ( including your code injection ) and it comes from their IP

old method

Nitros · Jan 4, 2015

koopsta said:
some of you seem to be missing the point; when you set the cache of the js at some random date in the future, when the user disconnects from your proxy, and goes back to their normal internet connection, they still have that cached version of the js. so whenever they visit the site it's from, their browser loads the cached version ( including your code injection ) and it comes from their IP

old method

Exactly my thoughts. The point of this method is to use their browser cache to load your js.

bartosimpsonio · Jan 5, 2015

Of course if you damage the client PC then yes it probably is illegal but that would be illegal without a proxy as well.

There's nothing illegal in this method if you use it for harmless marketing purposes.

mrblackjack · Jan 5, 2015

Come one guys, dont act like pussies. Using a clickjacking script to hijack users' likes is even more "illegal" than this, and yet all of us do it. So, take it or leave it.

ADVANCED Black Hat Public Proxy Technique

bartosimpsonio

Elite Member

tony_d

Elite Member

TheSnowman

Newbie

qrazy

Senior Member

bartosimpsonio

Elite Member

StaceyJ

Registered Member

tony_d

Elite Member

laowai

Power Member

ficfroc

Regular Member

CyHead

Supreme Member

fistor

Regular Member

accelerator_dd

Elite Member

snarky

Junior Member

playerb

Junior Member

Nitros

Power Member

bartosimpsonio

Elite Member

mrblackjack

Senior Member

Main Menu

Marketplace

Making Money

BlackHat World