Moveable Type Backlink Exploit

teru1987

Do you want free backlinks? Does the Pope shit in the woods?

Boogybonbon has found a way to exploit the preview comment form to create backlinks from Movable type blogs.

From the post, MovableType preview button good for back links:
# Q  v; l0 `1 |# `& i

As long as the blog is not a MovableType 3.2/3.x the blog will give a nice URL that you can publish into a ping list and get indexed for back links. This is because the MovableType 3.x uses JavaScript to convert tags into a preview comment field and as we all know search engines cant see that.
! j8 i4 k3 n# v- y% I; U5 z
7 q, ?% x+ [! u2 {* `Needles to say it only took me about 15 minutes to find 6 blogs with PR 5-8 and process the forms over to GET then post the URL’s into a couple ping sites.

Here’s how it works:
# O) [* I/ a9 Q$ G
# v1 g; ^2 {, F' ]The preview comment button on movable type blogs uses the POST method but search engines require the GET method to index a URL. So, what you need to do is:

1. Download the firefox extension webmaster tools to convert the POST forms to GET forms.

2. Find Movable type blogs.

3. Open The “preview Comment” in a new window.
! z& a/ k+ [2 f# z  B
) c3 T3 L2 q0 o/ d/ M4. Convert the POST Form to a GET Form like this:
  q4 r! J* Y/ |2 R! b

: N4 e2 p! a' o  s: b% b! V5 q% E
: W/ o; r* @1 H  w% I5. Fill out comment however you like.
; I  ^2 F) N% J, O2 ^
2 ]4 G' M! f( k7 e. J3 G6. Press preview comment.

+ Z3 W4 d, e& q% s& n( c- Y! M7. Instead of producing a url like this:

http://www.baseballmusings.com/cgi-bin/mt/mt-comments-pinto.cgi
) u0 ]2 }9 ?1 ~2 b- x
it will produce a URL like this (images used for formating purposes):



The links on the produced pages are NOT nofollow.
. I( g2 k6 S3 t' m4 Q6 ]
% @6 I/ H# {8 O8. Now, you may want to use a service like tinyurl or a redirect to hide what you are doing (not required)
2 b! f# n& l! ~+ _
9. Ping that URL to the Search Engines in splog posts, guestbooks, or however you think best.
+ h5 [& r  [2 N( C6 m; s. [
' @4 X. u: d2 x  V$ n3 }2 cPretty freaking cool, huh?

; G2 H) s* \2 Y9 B: C! B[ 本帖最后由 teru1987 于 2006-7-22 16:23 编辑 ]