Moveable Type Backlink Exploit

teru1987

Do you want free backlinks? Does the Pope shit in the woods?

Boogybonbon has found a way to exploit the preview comment form to create backlinks from Movable type blogs.
6 i7 n/ O) e2 W- ~4 i2 \  y) L
: k% e, A+ R" jFrom the post, MovableType preview button good for back links:

As long as the blog is not a MovableType 3.2/3.x the blog will give a nice URL that you can publish into a ping list and get indexed for back links. This is because the MovableType 3.x uses JavaScript to convert tags into a preview comment field and as we all know search engines cant see that.

Needles to say it only took me about 15 minutes to find 6 blogs with PR 5-8 and process the forms over to GET then post the URL’s into a couple ping sites.

& b( w" A( ?) h, z
' u8 I& k; }2 T& P8 I9 s( sHere’s how it works:

The preview comment button on movable type blogs uses the POST method but search engines require the GET method to index a URL. So, what you need to do is:
/ Q" Q* [  |1 ?6 S. j3 t9 J- V
" x/ t8 I+ F! A, H( j6 c/ _) D$ N1. Download the firefox extension webmaster tools to convert the POST forms to GET forms.
+ z' W3 Q  {1 B. J" ~3 F
2. Find Movable type blogs.

3. Open The “preview Comment” in a new window.

4. Convert the POST Form to a GET Form like this:

9 t/ ?# }# D/ }
; G0 u) Y0 K- M/ d3 \
0 m1 p1 ~: l3 a( z& w% D# C( J9 }5. Fill out comment however you like.

6. Press preview comment.
5 f3 s0 F! O1 }5 O& g' z
7. Instead of producing a url like this:
/ K5 K+ U# L; W! a1 W
1 a( _6 |& G& J4 vhttp://www.baseballmusings.com/cgi-bin/mt/mt-comments-pinto.cgi

it will produce a URL like this (images used for formating purposes):
4 I$ _) A/ \/ B* i/ W: P

8 c/ K3 @  A0 X  x, n, G. X! Y
The links on the produced pages are NOT nofollow.
& K# ~5 w9 h" c7 }
* n$ m# Q0 t( i$ E* l4 b8. Now, you may want to use a service like tinyurl or a redirect to hide what you are doing (not required)

0 M' W9 y3 E1 a! U# D$ [+ ?- x9. Ping that URL to the Search Engines in splog posts, guestbooks, or however you think best.

5 k/ p9 s% l  n# [Pretty freaking cool, huh?

[ 本帖最后由 teru1987 于 2006-7-22 16:23 编辑 ]