1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Using google as a referer

Discussion in 'BlackHat Lounge' started by grodt, Nov 16, 2009.

  1. grodt

    grodt Newbie

    Joined:
    Sep 6, 2009
    Messages:
    26
    Likes Received:
    6
    Code:
    http://www.google.com/url?sa=t&source=web&ct=res&cd=1&ved=0CAgQFjAA&url=http%3A%2F%2Fwww.googlesux.com%2F&rct=j&q=google+sucks&ei=ko0BS6edCIT94AaDkd2EDA&usg=AFQjCNHhc-z92V-OClI477YwQJGhTrSGLg
    This will make it seem like the user found your site on google. Not sure how this could be useful to anybody. Just quite alot of info on this site in faking referer.
     
  2. SebastianJu

    SebastianJu Power Member

    Joined:
    Mar 27, 2008
    Messages:
    679
    Likes Received:
    130
    Can you explain how to create such link? Simply replacing url doesnt seem to work and on the linked page I cant find any tutorial. So how is this link created?

    Greetings!
    Sebastian
     
  3. CSalt2

    CSalt2 Jr. VIP Jr. VIP Premium Member

    Joined:
    Feb 5, 2009
    Messages:
    753
    Likes Received:
    357
    hey this is gold if it really works, explain more in detail how this is done or even possible...
     
  4. angelas111

    angelas111 Jr. VIP Jr. VIP Premium Member

    Joined:
    Jan 4, 2009
    Messages:
    1,570
    Likes Received:
    1,016
    Location:
    ohio
    yeah. i can think of 100 uses for this if it works.
     
  5. grodt

    grodt Newbie

    Joined:
    Sep 6, 2009
    Messages:
    26
    Likes Received:
    6
    I don't have the time to write a script atm...but you see all the links on the google search pages, they're not the direct link to the site...you go through a middle url provided by google...so if your site comes up in google then it's a matter of directing your users exactly to that link...so google will take the url in query string and redirect the user to it, thus setting the reffer as google, more precisley google search. i think the links expire after some time elapsed not sure whether it's hours or days, someone can write a script to generate the links hourly or daily depending on the expiring value....or i could be talking crap, try it yourself...google something, right hand click the link and copy it to somewhere...you'll see it's a google url....only tested on FF
     
  6. SebastianJu

    SebastianJu Power Member

    Joined:
    Mar 27, 2008
    Messages:
    679
    Likes Received:
    130
    Hm. Im using FF3. The results in google are direct links for me. I searched the sourcecode but didnt found a link thats similiar to the one you posted.
    ...
    Ok, I found the problem... it only works at google.com...

    Hm... I need to find out how this link is put together...
    ...
    It is first a normal link and is building the other link when copying the link or clicking...

    Greetings!
    Sebastian
     
    Last edited: Dec 7, 2009
  7. oyeah22

    oyeah22 Power Member

    Joined:
    Nov 9, 2009
    Messages:
    633
    Likes Received:
    244
    Location:
    i dont remember
  8. grodt

    grodt Newbie

    Joined:
    Sep 6, 2009
    Messages:
    26
    Likes Received:
    6
    lol i hope your joking...if not try checking the actual request and response data there is no referer header set.
     
  9. SebastianJu

    SebastianJu Power Member

    Joined:
    Mar 27, 2008
    Messages:
    679
    Likes Received:
    130
  10. WImpact

    WImpact BANNED BANNED

    Joined:
    Dec 2, 2009
    Messages:
    13
    Likes Received:
    0
    doesnt work
     
  11. Knoxgates

    Knoxgates Supreme Member

    Joined:
    Aug 9, 2008
    Messages:
    1,266
    Likes Received:
    918
  12. WImpact

    WImpact BANNED BANNED

    Joined:
    Dec 2, 2009
    Messages:
    13
    Likes Received:
    0
    no it doesn't. it goes straight to the link. right click it and press copy link location and you will see. You can look at the source and see that as well
     
  13. Knoxgates

    Knoxgates Supreme Member

    Joined:
    Aug 9, 2008
    Messages:
    1,266
    Likes Received:
    918
    @WImpact: You do it from Google.com using the steps mentioned above. Remember it just appears for 1-2 seconds before redirecting to your website
     
  14. WImpact

    WImpact BANNED BANNED

    Joined:
    Dec 2, 2009
    Messages:
    13
    Likes Received:
    0
    No it doesn't. it only appears on sublinks which are useless and dont lead to your main site.
    Also after dissambaling the link it comes out to

    http://www.google.com/url?sa=t&source=web&ct=res&cd=1&url=http%3A%2F%2Fwww.googlesux.com%2F&rct=j&usg=AFQjCNHhc-z92V-OClI477YwQJGhTrSGLg

    and the actual encryption that sets off the alarm is

    &usg=AFQjCNHhc-z92V-OClI477YwQJGhTrSGLg

    So if you know that encryption, you can redirect any url.

    i dont see any use in this anyways. if you want to fake referrer then you should fake it to the search query

    example:

    Code:
    http://www.google.com/search?q=blackhatworld&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a
    since that is the ACTUAL referrer which is logged.


    here is what I mean

    Code:
    http://www.google.com/search?hl=en&client=firefox-a&rls=org.mozilla:en-US:official&hs=k2R&nfpr=1&ei=q4MdS8DkJseWtgeDvsDSAw&sa=X&oi=spell_nofullpage&resnum=0&ct=result&cd=1&ved=0CAYQBSgA&q=check+your+referrer&spell=1
    Go there and click the first link, and you will see that the refferer is the search term
     
    Last edited: Dec 7, 2009
  15. SebastianJu

    SebastianJu Power Member

    Joined:
    Mar 27, 2008
    Messages:
    679
    Likes Received:
    130
    Your example will show

    Code:
    http://www.google.com/url?sa=t&source=web&ct=res&cd=1&ved=0CAcQFjAA&url=http%3A%2F%2Fclub60.org%2Ftestref.php&rct=j&q=check+your+referrer&ei=7YUdS6ndNpbCmgODn6FH&usg=AFQjCNFg7DODUYgV1lzrg4tKIr2A1ZYOQg
    as the Referrer when google is using this trackinglinks.

    And it shows this

    Code:
    http://www.google.com/search?hl=en&client=firefox-a&rls=org.mozilla%3Aen-US%3Aofficial&q=check+your+referrer&btnG=Search&aq=f&oq=&aqi=
    when its using the normal one.

    So its a legit referrer.

    But I dont see a way to use this. Only possible if a site is indexed for a given keyword. Then should it be possible to use a script, type the keyword in, get the trackinglink and reuse it. But it would be simple for google to find out your using your trackingscript more often than normal.

    And if you have a site thats not indexed for a keyword it seems to me you have no chance to get the trackinglink. Because the link is produced through a function which needs vars that are coded. That means without the codes you cant get your trackinglink on your own.

    So I dont think this is useable... Too bad...

    Greetings!
    Sebastian
     
  16. WImpact

    WImpact BANNED BANNED

    Joined:
    Dec 2, 2009
    Messages:
    13
    Likes Received:
    0
    No this is perfect for blackhat traffic on cpa links. When you run cl offers you can hide your traffic by changing the referer to the google search one. So they cant complain when they see that you are promoting them using whitehat traffic.
     
  17. SebastianJu

    SebastianJu Power Member

    Joined:
    Mar 27, 2008
    Messages:
    679
    Likes Received:
    130
    So how would you do this? Using a site that is indexed for a special keyword? And get the trackinglink from there?

    I mean when you have a site loanexample.com which is indexed in google for the searchterm loan then you can get a google trackinglink to that site. You could use this for CL. 2 Problems remain. Google will be suspicious when you use it too often and too long and it would always be the same referrer. So you should spread the keyword that is used.

    Greetings!
    Sebastian
     
    Last edited: Dec 7, 2009
  18. WImpact

    WImpact BANNED BANNED

    Joined:
    Dec 2, 2009
    Messages:
    13
    Likes Received:
    0
    You can build a simple php script that alternates the referrer every x amount of visits. Then you preload the referrer links and let it run. The networks will see this as organic traffic from google and will be less likely to get you banned.
     
  19. SebastianJu

    SebastianJu Power Member

    Joined:
    Mar 27, 2008
    Messages:
    679
    Likes Received:
    130
    That would be possible. Unfortunately this only works as long as the targetpage is indexed for the keywords you want to use. And you would be limited. Normal logs shows google from different countries, ips, get-vars and so on.
    But its useable.

    Too bad its not working for keywords and sites that arent indexed... Then I could have used it...

    Greetings!
    Sebastian
     
  20. WImpact

    WImpact BANNED BANNED

    Joined:
    Dec 2, 2009
    Messages:
    13
    Likes Received:
    0
    Most of my sites get indexed after like 1 day of spam. Soon as google sees 2-3k people visiting it a day, they index it.