[TUT and CODE] How to Fake your Referer, Fake Referer Any Offer, Fake Referrer Script

Jaykub said:
ummm the thing is, i don't MY white hat page to be the referer but a page like let's say google !! is this possible in any way regarding to iframes?
Click to expand...

Most CPA has iframe buster code in their landing pages. Any iframe attempt will failed.
 
Advertise on BHW
ceo140 said:
Most CPA has iframe buster code in their landing pages. Any iframe attempt will failed.
Click to expand...

let that be my problem, i know how to deal with those kinda things ;)

how can i "spoof" the referer in an iframe? i dont want the referer of the iframe to be "mywhitehatpage.com" but rather somehting like "facebook.com" or "yahoo.com"

any ideas? OP??? :(
 
the script was great, i used it in a project i was making with faking iframe referer, modified a bit and worked perfect. :) rep given
 
Jaykub said:
let that be my problem, i know how to deal with those kinda things ;)

how can i "spoof" the referer in an iframe? i dont want the referer of the iframe to be "mywhitehatpage.com" but rather somehting like "facebook.com" or "yahoo.com"

any ideas? OP??? :(
Click to expand...

Can't really be done, I'm afraid.
The current method available to do that involves using CURL. It's great for using any site you don't control as your fake referer but, sadly, although you can vary referers, user-agents, etc, all requests will come from the same IP address, the server which is running the Curl script :(

The only way around that is to have a large network of proxies, IPs, a (dare I say it?) botnet, etc
These are things I have heard are in use for this sort of thing, but they are NOT things I'm familiar with, nor would I wish to get involved with some of them, as they are the darkest recesses of the BH world, imho.

Sorry I can't offer much help, but, keep digging, you might come up with something.
 
What's the point in hiding the referrer url when the referrer url is within the fake url?
myCPAnetwork.com?oid=12345&pid=6789&

Everyone will know that you're an affiliate... So it's smart to use pretty link to cloak that url a second time?
 
Any solution for if you are not a CLP buyer, and want to have a similar solution for driving traffic off of CL or other classified ad sites? I don't necessarily want to lock some of this content, but in driving CL traffic directly to my CPA offers that can be a no no. Solutions?

I have contemplated buying CLP and just havent yet. SOunds like I am missing out. Johnson if you wouldnt mind PMing me if you have some sound advice that would be great my friend.
 
Rankiz said:
What's the point in hiding the referrer url when the referrer url is within the fake url?
myCPAnetwork.com?oid=12345&pid=6789&Everyone will know that you're an affiliate... So it's smart to use pretty link to cloak that url a second time?
Click to expand...

Hey,

That's not the referer url, that's the destination url.

Nothing is stopping you from prettying, cloaking or shortening the destination url, this will still work.

We're not actually trying to pretend to our visitors that we're not affiliates (they already know that we are), what we're trying to do here is make the advertisers or CPA Networks think our traffic is arriving on their offer page from a nice whitehat site, rather than from some shady, not-quite-100%-legit-content site.
 
ItisIsaysMe said:
Any solution for if you are not a CLP buyer, and want to have a similar solution for driving traffic off of CL or other classified ad sites? I don't necessarily want to lock some of this content, but in driving CL traffic directly to my CPA offers that can be a no no. Solutions?

I have contemplated buying CLP and just havent yet. SOunds like I am missing out. Johnson if you wouldnt mind PMing me if you have some sound advice that would be great my friend.
Click to expand...

Well, I'm definitely going to say that you're missing out, but then I'm biased ;)

Nevertheless, if you're not looking to "lock" content, and all you want to do is to hide the fact that you are driving traffic to offers from CL, all you really need is the script in this thread, or a decent blanking script.

Send your CL traffic to the offer via your handler domain (where you've placed this script), and use any whitehat site you own as the spoofed referer, and you're golden.
Now, it appears as if your traffic is coming from that lovely whitehat site.

I've got some more scripts up my sleeve, I'll be sharing them soon :)
 
Thanks for the script.

Is it possible to name the first code anything other than index.php in the root directory? As I am using this script on a real active website where the index.php file already exists and if I include the code at the top of the page I get the message.

You must provide a referer
Click to expand...

So can I include the index.php file in another directory? (tried this didn't work)
Or can I rename the file something else e.g. referer.php in the root directory and it will still work?

Cheers
 
This is "POWER", where do i send you a paypal thank you to ... Right what I was looking for.. While a thanks is one thing, we should be leaving paypal $ in his tip jar
 
pokerjk said:
Thanks for the script.

Is it possible to name the first code anything other than index.php in the root directory? As I am using this script on a real active website where the index.php file already exists and if I include the code at the top of the page I get the message.



So can I include the index.php file in another directory? (tried this didn't work)
Or can I rename the file something else e.g. referer.php in the root directory and it will still work?

Cheers
Click to expand...


Try creating a new folder in your root directory and name that. Within the named folder have the index.php FILE. See if that works
 
JohnsonDaniel said:
Here is a script I made for Content Lock Pro buyers which will provide Fake Referer functionality.

I have decided to share with BHW for free - awesome for when you don't quite have
the <cough> right <cough> type of traffic :)

It will allow you to fake http referer when sending traffic.
Spoof referer, fake http refer, fake referrer, they can all be done.

We all know the value of a decent solution, and this one works in all
browsers tested so far.

Reports on further test results are welcomed in this thread.

The requirement:

Transfer, including any parameters (even dynamically generated) to a
destination link, whilst replacing the original referer info in the surfer's
browser to a new referer of our choice.

Self-host the script which will handle the transfer.

If the script is hosted on
HTML: 
http://handler.com
construct fake referer urls like:
HTML: 
http://handler.com/?url=DestUrlIncludingParameters&referer=FakeRefUrl
Steps to Make this work for you:

1. Save the following code as index.php and upload to the domain of your choice. The domain will "handle" the redirections, and will not be seen:

PHP: 
<?php
// Extract URI minus http://handlerdomain.com/
$full_url = urldecode($_SERVER['REQUEST_URI']);
// Extract urls we need
$l = strlen($full_url);
$p_referer = strpos ($full_url, 'referer=');
$p_dest_2 = $p_referer - 1;
$p_referer = strpos ($full_url, '=',$p_referer) + 1;
$url_referer = substr ($full_url , $p_referer);
$p_dest_1 = strpos ($full_url, '=') + 1;
$l = $p_dest_2 - $p_dest_1;
$url_dest = substr ($full_url , $p_dest_1, $l);

// Create self-posting form.
if ($url_referer != '') {
    echo '<html><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"></head><body>
    <form action="'.urldecode($url_referer).'" method="post" id="myform">
    <input type="hidden" name="ref_spoof" value="'.urldecode($url_dest).'">
    </form><script language="JavaScript"> document.getElementById(\'myform\').submit();</script></body></html>';
} else {
    echo 'You must provide a referer';
}
?>
2. Insert the following code in any page (must either be a php page, or an
html page on a server which will execute php code within html files), any
WP page or post, or, if wanting to be able to use "any" post on your WP
blog as your referer, insert it in the WP header.php file (this will even permit
a fake referer to be a post which doesn't actually exist):

PHP: 
<?php
if ($_POST['ref_spoof'] != NULL) {
    $offer = urldecode($_POST['ref_spoof']);
    $p1 = strpos ($offer, '?') + 1;
    $url_par = substr ($offer , $p1);
    $paryval = split ('&', $url_par);
    $p = array();
    foreach ($paryval as $value) {
        $p[] = split ('=',$value);
    }
    echo'<html><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"></head><body><form action="'.$offer.'" method="get" id="myform">';
    foreach ($p as $value) {
        echo '<input type="hidden" name="'.$value[0].'" value="'.$value[1].'">';
    }
    echo '</form><script language="JavaScript"> document.getElementById(\'myform\').submit();</script></body></html>';
}
?>
3. Usage:

Say, for example, you upload the first file, as index.php, to handler.com,
and you place the second code in a Wordpress Header.php, on myfavewpsite.com, which, say,
has a post like: myfavewpsite.com/post-with-ads.

Now, you want to send your visitors to this offer link:

myCPAnetwork.com?oid=12345&pid=6789&sid=yy7456

The link you would post or display or send your visitors to would be:

HTML: 
http://handler.com/?url=myCPAnetwork.com?oid=12345&pid=6789&sid=yy7456&referer=myfavewpsite.com/post-with-ads
As mentioned above, tests are welcomed, but please, if using or testing, post observed results, and
leaks, if any (there shouldn't be, ever) in this thread.

Also, this will not work to use ASP-based pages as the fake referer, the page must be able to interpret php
code (most servers do).


Feel free to check other threads started by me to find my other shares:

1. Content Locking Methods to make $$$ per day:

a) http://www.blackhatworld.com/blackh...-my-twisted-method-1k-week-noob-friendly.html

b) http://www.blackhatworld.com/blackhat-seo/making-money/311722-my-twist-content-locking-80-day.html

2. Yourls Plugin, Shorten a Url, Iframe the Destination, and Execute Code (locker or other code):

a) http://www.blackhatworld.com/blackh...-like-gauging-interest-will-release-free.html

b) http://www.blackhatworld.com/blackh...reate-iframe-long-url-lock-call-any-code.html

3. Use your US-based VPS as a secure VPN for your private use.

http://www.blackhatworld.com/blackh...rver-vps-need-ip-private-vpn-your-server.html
ENJOY!

If you like my stuff, please post on the threads with your thoughts, your mods, your methods or your spins.

Please - no PMs, keep questions to the relevant threads.
Click to expand...


I am not knowledgeable enough with Blogger Blogs, but is it possible to use Blogger Blogs as either the Handler OR upload this script to them?

Thanks
 
Thanks for the codes, they are great.
After testing for few days, i see this leak once at aproximate 10k uniques, it leaks exactly where is the link ( In my aff site appear exactly: "mysite/ link . php" as referer )
where link . php contain

<iframe src="handler/?url=CPAoffer&referer=Whitesite" width="0" height="0" scrolling="no" frameborder="0"></iframe>

I am using <iframe src="mysite/link . php" width="0" height="0" scrolling="no" frameborder="0"></iframe> in the source of the traffic site.


( removed http since i m new member here and have a limitation to that )
Any ideea how to stop this leak? I don t have yet any info what type of browser had the visitor.

Conclusion: It is very good that never leak the Handler domain but is bad if sometimes it leak the location of the link because if aff check it out... they can see what link contain wich is very bad.
P.S. It is possible to "deny" some browser types? Like refusing to accept some browser refferers like mobiles, linux, etc.
 
hi
Just a small question.. i want to show the advertiser that traffic is from email... do you think if i put lot of email referer urls in database and dynamically generate the handler url with new referer each time (from database)... will it work and show the email referer like mail.yahoo.com?asf&blahblah



AR
 
scofieldthe said:
Thanks for the codes, they are great.
After testing for few days, i see this leak once at aproximate 10k uniques, it leaks exactly where is the link ( In my aff site appear exactly: "mysite/ link . php" as referer )
where link . php contain

<iframe src="handler/?url=CPAoffer&referer=Whitesite" width="0" height="0" scrolling="no" frameborder="0"></iframe>

I am using <iframe src="mysite/link . php" width="0" height="0" scrolling="no" frameborder="0"></iframe> in the source of the traffic site.


( removed http since i m new member here and have a limitation to that )
Any ideea how to stop this leak? I don t have yet any info what type of browser had the visitor.

Conclusion: It is very good that never leak the Handler domain but is bad if sometimes it leak the location of the link because if aff check it out... they can see what link contain wich is very bad.
P.S. It is possible to "deny" some browser types? Like refusing to accept some browser refferers like mobiles, linux, etc.
Click to expand...

You might want to try blanking first, and then spoofing.
One leak per 10k uniques is pretty good, though
You also mention it leaks your middle site, and not the site to which you drive the traffic, which is good.
If you keep your middle site relatively WH, and an AM visits it, just tell them you route all your traffic through that site for tracking purposes.

Yes, you can add extra code to not redirect certain browsers, although browser detection code isn't 100% reliable.
 
ItisIsaysMe said:
I am not knowledgeable enough with Blogger Blogs, but is it possible to use Blogger Blogs as either the Handler OR upload this script to them?

Thanks
Click to expand...

You can upload the spoofing code, and use Blogger blogs as your spoofed referers. You can NOT use them as the handler.
 
Arania said:
hi
Just a small question.. i want to show the advertiser that traffic is from email... do you think if i put lot of email referer urls in database and dynamically generate the handler url with new referer each time (from database)... will it work and show the email referer like mail.yahoo.com?asf&blahblah



AR
Click to expand...

For this to work, you have to add some code to any site you wish to use as your fake referer. Since you can't add code to yahoo.com, you're not going to be able to do what you are suggesting.
 
JohnsonDaniel said:
For this to work, you have to add some code to any site you wish to use as your fake referer. Since you can't add code to yahoo.com, you're not going to be able to do what you are suggesting.
Click to expand...

hmm

i got it... as its actually going through the site what we want to show as referer..

is there anything we can do to show them referer something like mail.yahoo.com to advertiser?

AR
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top