1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

(Brainstorming) Exploiting bots posting comments on your blog

Discussion in 'Black Hat SEO' started by ju111, Aug 5, 2013.

  1. ju111

    ju111 Newbie

    Joined:
    Jul 15, 2011
    Messages:
    41
    Likes Received:
    16
    Hi,

    I was just thinking about bots trying to post a lot of comments on my blogs. This is a big traffic and I wondered how to exploit it. So, I started to think deeper about it in order to find a solution - not to ban them definitely - but to exploit them for MY profit.

    And I was thinking: what if as soon as my blog detect a comment attempt from a bot, it redirects the bot to a google search with my domain as the keyword AND without the referer?

    => If your blog is not in first page, Google will "think" : "hmm, I have someone who are looking for this website. He does not see what is looking for as the site is in second page. We must rank this website better".

    It may be naive, but it is a brainstorming. At the current Blackhat conference in Las Vegas, someone has made a presentation regarding ads, and he told: "as soon as a user visit a website, the website owns the user". The presentation focuses on the capacity to build a Denial of service attack using ads (and therefore using javascript and visits on a dedicated webpage to DOS another website). But I am sure that we can do something which would be profitable for business.

    Feel free to comment!
     
  2. Zuuuu

    Zuuuu Regular Member

    Joined:
    May 9, 2013
    Messages:
    472
    Likes Received:
    172
    Hmm try to do a research .. Here are few smart bots that can do this for you :p
     
  3. edithcowr

    edithcowr Newbie

    Joined:
    Jul 27, 2013
    Messages:
    24
    Likes Received:
    1
    Sounds like a wonderful idea to me. But how do you plan to implement the idea and more importantly, how would you get around a false positives? (You would need to implement a mechanism to detect if a bot is really a bot and not a human, but again bots are getting more and more sophisticated as time goes by)!
     
  4. MysticMerchant

    MysticMerchant Newbie

    Joined:
    Aug 27, 2011
    Messages:
    43
    Likes Received:
    8
    In my experience anyone that posts a link is Generally a bot.
     
  5. ju111

    ju111 Newbie

    Joined:
    Jul 15, 2011
    Messages:
    41
    Likes Received:
    16
    New blogs have only bots for comments. And new blogs are only from 2 to 5th page of Google.
     
  6. goldendeli

    goldendeli Regular Member

    Joined:
    Nov 21, 2012
    Messages:
    313
    Likes Received:
    38
    Occupation:
    dolalr bills
    wont the bots not accept the redirect and just go on to the next page to spam on? im pretty sure the redirect wouldn't even be processed.
     
  7. ju111

    ju111 Newbie

    Joined:
    Jul 15, 2011
    Messages:
    41
    Likes Received:
    16
    There are two main questions:

    1 Are bots programmed to follow HTTP 302 Redirect? (302, not sure, to be checked, I dont remember the HTTP Code for that)

    2 Do google implement a cookie/session-cookie/ID to see if the link comes from real search (I mean : typing something in Google search), and what is the impact to bypass this step?

    For 1, i am pretty sure that a LOT of bots follow HTTP Redirect.

    For 2, I am pretty sure that a lot of people type directly their search with the google/search&q=yourkeyword, through third parties programs and web portals.

    So, I would say: it can work, but I am not really sure.
     
  8. ju111

    ju111 Newbie

    Joined:
    Jul 15, 2011
    Messages:
    41
    Likes Received:
    16
    Maybe. What about the current bots here? Do they follow redirects?
     
  9. stugz

    stugz Junior Member

    Joined:
    Apr 14, 2013
    Messages:
    154
    Likes Received:
    33
    Referrer is set on the client side. There is no to predict what the referer will show as once you redirect away.
     
  10. goldendeli

    goldendeli Regular Member

    Joined:
    Nov 21, 2012
    Messages:
    313
    Likes Received:
    38
    Occupation:
    dolalr bills
    Id be interested to hear from someone that has more information on Scrapeboxs functionality. My assumption is that the redirect would be skipped as it's not a valid posting URL. Kepe in mind all of the spammy redirects that already exist Id assume that the tools would just skip those.
     
  11. competent123

    competent123 Registered Member

    Joined:
    May 30, 2009
    Messages:
    55
    Likes Received:
    14
    its easy, i had implemented something similar on a client site sometime ag0

    1- bot comes, we detect it via refer etc.
    2- instead of showing him the comment box, we show him the google custom search engine box, with a custom query preset.

    then when the bot uses : click" to submit content, it is actually submitting custom query to google custom search engine.

    its not really rocket science you know. you just need to think out of the box.