Moveable Type Backlink Exploit

teru1987

Do you want free backlinks? Does the Pope shit in the woods?
: c& Z/ K4 }4 u, |
2 @( g1 J6 l! w- J: y* v0 K- S9 yBoogybonbon has found a way to exploit the preview comment form to create backlinks from Movable type blogs.

From the post, MovableType preview button good for back links:
. y0 J6 F4 g4 h. F1 Q& i; n2 u$ _9 F

As long as the blog is not a MovableType 3.2/3.x the blog will give a nice URL that you can publish into a ping list and get indexed for back links. This is because the MovableType 3.x uses JavaScript to convert tags into a preview comment field and as we all know search engines cant see that.

Needles to say it only took me about 15 minutes to find 6 blogs with PR 5-8 and process the forms over to GET then post the URL’s into a couple ping sites.

' {5 X+ X  t+ T. Z5 j$ o# ~. V
Here’s how it works:

) t1 t* J' T. nThe preview comment button on movable type blogs uses the POST method but search engines require the GET method to index a URL. So, what you need to do is:

1. Download the firefox extension webmaster tools to convert the POST forms to GET forms.
" c5 k; S$ \; n& x9 q" O
3 g% W6 y9 Q/ r% T& F2. Find Movable type blogs.
5 y$ t# S2 i% s  N2 \
3. Open The “preview Comment” in a new window.
6 F* ?( {) U2 [7 S
4. Convert the POST Form to a GET Form like this:
* P. j' k( c0 ?' P1 k
0 m9 O) |& k8 X! M1 H6 y9 h

' f, N7 ~9 t; A1 c$ b; u0 ]5. Fill out comment however you like.

6. Press preview comment.

, W: N) g+ ~4 g% l0 X- W7. Instead of producing a url like this:
" P- T, }9 }# o: o: l8 r! X8 g
http://www.baseballmusings.com/cgi-bin/mt/mt-comments-pinto.cgi
- }! R/ r5 R+ K6 D
it will produce a URL like this (images used for formating purposes):
) M4 Q1 R: z. S
* R: I7 S4 h7 i) g
9 B  ?3 r  r+ _- C/ [! W8 V) |( y
) _4 I- Q$ c/ [/ L9 f/ e5 K  eThe links on the produced pages are NOT nofollow.
* b" i8 G7 g3 X# Z7 r
: B- y9 t3 q3 K" P$ k8. Now, you may want to use a service like tinyurl or a redirect to hide what you are doing (not required)

1 i. U3 d$ ^( L" M9. Ping that URL to the Search Engines in splog posts, guestbooks, or however you think best.
0 h; s. E) _* B, p9 w0 `4 ]
* X; b# p1 j- q8 ZPretty freaking cool, huh?
$ p2 w) H  j$ O6 U1 g+ p. ^
[ 本帖最后由 teru1987 于 2006-7-22 16:23 编辑 ]