Change Referrer to anything - Testing it out

Status
Not open for further replies.
H

hardsoft

Registered Member
Joined
Apr 10, 2008
Messages
53
Reaction score
180
I have some code that will allow me to change the referrer to anything i want. Ive tested it out and it seems to work. But i dont have any experience in coding or how to make sure it works 100% of the time and what not. The code is in PERL.

Anyways...

Click Here To Test

As you know, the referrer SHOULD be coming from black hat world... but if you look, the referrer is something different to what i changed it to.

I just need someone that is an experienced coder to check it out, and see if it really does what i think it does.
 
Advertise on BHW
also, please post if the test worked or did not work for you.
 
Worked for me. Looks like you've hit something good. Be sure to hit me up with a copy of the script. I need it bad!
 
nice, it worked for me

can you share the script
 
seems to work but who knows it could be javascript changing the values on the webpage?? send me a copy and I will let you know if it is for real and how good it is.
 
i'd like a copy ... would be better than the referrer script i'm using if it totally change to whatever you want. thanks.
 
yeah wow, so you proxied a request through your server.. so now all traffic will show up from your server's IP..
 
he's got you all fooled lol. unless I am mistaken this simply uses socket and or serverside proxy to change the referer. I posted this proof of concept back in april. u can do this in perl, php, or htacees modification.
Click to expand...

First of all... im not trying to fool anyone here lol. As i said, im not a coder so i dont know if this is the real deal or not. I wanted verification that it works (from someone with experience) before i used it myself.

Anyways, ive received a few PM's stating that they have the very same "script" as me (it was posted in a private membership forum) and that i would be an idiot to share it. Im not here to cause drama, i just wanted some help and verification.
 
It's not hard for a server side application to change the Referrer as this is an environmental variable available to the server, and thus to all server side code. In the case of PHP it's as easy as tossing:

PHP: 
header("Referrer: myspoofedheader.com");

into your script. This doesn't mean that using this, and then applying a PHP Redirect header is going to feed your spoofed referrer to the target site.

The problem with spoofing the referrer that a foreign environment receives is that this has to be done before reaching the target, or through running malicious code on the target. The major reason being each server environment has access to it's own variables, and outside scripts aren't typically allowed to arbitrarily edit them.
 
Last edited:
Unless you are to carefully and cleverly use this script as some form of middleman, it only fools itself.
 
hardsoft said:
also, please post if the test worked or did not work for you.
Click to expand...

I posted some example code that does this in another thread I would read the replies on why this method is not as hot as you think it is :-)



PHP: 
<?php


// The domain we want to connect to

$host = "www.scanmybrowser.com"; 

// Page we want to POST or GET

$page = "index.php";

// The list of our fake referer urls

$file = "urls.txt";
$fp = file($file);
srand((double)microtime()*1000000);
$urls = $fp[array_rand($fp)];



// construct a header for our request still need to add all headers and random user Agents

$hdrs = array( 'http' => array(

    'method' => "GET",



    'header'=> "accept-language: en\r\n" . 

        "Host: $host\r\n" .

		"User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:x.x.x) Gecko/20041107 Firefox/x.x\r\n" .

		"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n" .

		"Referer: $urls\r\n" .  // Setting the http-referer

        "Content-Type: text/html\r\n" .

        "Content-Length: 33\r\n\r\n" .

		"Keep-Alive: 300\r\n"

    )

);



// get the requested page from the server

// with our header as a request-header



$context = stream_context_create($hdrs);

$fp = fopen("http://" . $host . "/" . $page, 'r', false, $context);

fpassthru($fp);

fclose($fp);

?>
 
Last edited:
Ya, I second that... I'm curious as I'm working on my own idea for using this type of script?
I'm a developer and developing such a script, I will post back with my results, findings, and success!
 
Dont bump old dead threads. Make new ones, and make sure you make them good.

If anyone posts a one liner thread following this i'm giving out an infraction. You were warned.
 
Advertise on BHW
Status
Not open for further replies.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top