Moveable Type Backlink Exploit

teru1987

Do you want free backlinks? Does the Pope shit in the woods?

Boogybonbon has found a way to exploit the preview comment form to create backlinks from Movable type blogs.

6 p( W7 j$ [4 u& \From the post, MovableType preview button good for back links:

As long as the blog is not a MovableType 3.2/3.x the blog will give a nice URL that you can publish into a ping list and get indexed for back links. This is because the MovableType 3.x uses JavaScript to convert tags into a preview comment field and as we all know search engines cant see that.

Needles to say it only took me about 15 minutes to find 6 blogs with PR 5-8 and process the forms over to GET then post the URL’s into a couple ping sites.

Here’s how it works:

The preview comment button on movable type blogs uses the POST method but search engines require the GET method to index a URL. So, what you need to do is:
# V4 T! r! f5 T* d
4 z5 L' ~' ?& Q$ e8 _1. Download the firefox extension webmaster tools to convert the POST forms to GET forms.

2. Find Movable type blogs.
  F' G  y6 S' g3 d) z
3 {, I# }+ y& d" ]3 h, L! o4 p3. Open The “preview Comment” in a new window.

4. Convert the POST Form to a GET Form like this:
- t  V8 y0 z0 F/ M1 ^% n  o, X) H, t6 p


5. Fill out comment however you like.

6. Press preview comment.

, a$ E! C1 V7 P+ w7 k6 C7. Instead of producing a url like this:
! R: E" ^' H5 y* S) |4 R
http://www.baseballmusings.com/cgi-bin/mt/mt-comments-pinto.cgi

. n$ [& p0 R' O% |7 l9 {0 ~it will produce a URL like this (images used for formating purposes):


" {1 m. {: x$ b
The links on the produced pages are NOT nofollow.

8. Now, you may want to use a service like tinyurl or a redirect to hide what you are doing (not required)

9. Ping that URL to the Search Engines in splog posts, guestbooks, or however you think best.
) M5 j& t" }1 z- s$ M1 b4 l
' N& v4 z6 g) cPretty freaking cool, huh?

[ 本帖最后由 teru1987 于 2006-7-22 16:23 编辑 ]