Moveable Type Backlink Exploit

teru1987

Do you want free backlinks? Does the Pope shit in the woods?
, \- V1 q' G7 k
) \. W' F$ Z. a! m* T, N0 lBoogybonbon has found a way to exploit the preview comment form to create backlinks from Movable type blogs.
& \& z" O3 z% f0 ]4 p6 j$ [
; h$ m; i; L( D# dFrom the post, MovableType preview button good for back links:

As long as the blog is not a MovableType 3.2/3.x the blog will give a nice URL that you can publish into a ping list and get indexed for back links. This is because the MovableType 3.x uses JavaScript to convert tags into a preview comment field and as we all know search engines cant see that.
: m9 i% O9 e. L9 M5 }
Needles to say it only took me about 15 minutes to find 6 blogs with PR 5-8 and process the forms over to GET then post the URL’s into a couple ping sites.

0 O1 M% C) A8 N8 d& @  v/ y
& P; G5 _0 Y) q$ D6 ]/ g2 n: NHere’s how it works:

/ {9 h+ i; f* |! m& lThe preview comment button on movable type blogs uses the POST method but search engines require the GET method to index a URL. So, what you need to do is:
/ U" h* Z6 ~  ~5 v, |
2 I* h, c. p" l/ Z8 o! d% w/ v+ m+ I# X1. Download the firefox extension webmaster tools to convert the POST forms to GET forms.
0 E# {6 |8 b8 |! i3 r" a
2. Find Movable type blogs.

3. Open The “preview Comment” in a new window.
/ n( N, r  L3 V. b. h) j( ]. w
4 Y+ b! n2 @; Y' W1 p9 ^4. Convert the POST Form to a GET Form like this:



9 ?8 l9 }' ~3 _3 j: \5. Fill out comment however you like.
- t: a9 D" f$ B# E+ k( X/ M; ^
6. Press preview comment.
6 f, p& n1 y3 W5 L
6 S& l1 [3 d4 x3 u+ Y( v7. Instead of producing a url like this:

http://www.baseballmusings.com/cgi-bin/mt/mt-comments-pinto.cgi
5 _# z- J& h: H4 K% C% k) C) {# T
3 K/ T- m4 J, J  ~, R1 ]: d' `it will produce a URL like this (images used for formating purposes):
0 O: C/ d# ^: Q% ?/ o/ {
( m% B8 w1 V% N0 K4 o

The links on the produced pages are NOT nofollow.
* n# O+ ]$ h  E0 j4 [0 g. e$ P* j
# D2 A5 f0 b" r8. Now, you may want to use a service like tinyurl or a redirect to hide what you are doing (not required)

9. Ping that URL to the Search Engines in splog posts, guestbooks, or however you think best.
$ o+ K2 {, T5 m! d. B. Z3 s. T
5 s/ x  G+ ]' Q( ZPretty freaking cool, huh?
9 t5 [5 h" V" @  X
[ 本帖最后由 teru1987 于 2006-7-22 16:23 编辑 ]