Moveable Type Backlink Exploit

teru1987

Do you want free backlinks? Does the Pope shit in the woods?
: \! v  ^5 C7 w  i& j8 h+ }
. Z+ A1 I3 ^8 p* i- ~1 }- OBoogybonbon has found a way to exploit the preview comment form to create backlinks from Movable type blogs.
9 y8 N% P& a& @  P1 z% q. O
5 y9 I6 k% y% b& [' u/ GFrom the post, MovableType preview button good for back links:

As long as the blog is not a MovableType 3.2/3.x the blog will give a nice URL that you can publish into a ping list and get indexed for back links. This is because the MovableType 3.x uses JavaScript to convert tags into a preview comment field and as we all know search engines cant see that.
8 N- W, G& G4 A. L4 y: m1 `( }
& e$ ^1 L  m2 T' O! ?# B$ gNeedles to say it only took me about 15 minutes to find 6 blogs with PR 5-8 and process the forms over to GET then post the URL’s into a couple ping sites.

$ S: O; M( l0 Q7 Y8 ~+ j
Here’s how it works:

* d% F/ H, R. x+ TThe preview comment button on movable type blogs uses the POST method but search engines require the GET method to index a URL. So, what you need to do is:

  G7 P  o9 s& g9 s. i1. Download the firefox extension webmaster tools to convert the POST forms to GET forms.
* T9 l5 }5 o( G3 H7 z
( Q: r- J8 F' L5 m2. Find Movable type blogs.
* S. r# U. G5 m+ k# g2 n) F& z
7 H: j; d: n( C3. Open The “preview Comment” in a new window.
; u+ H2 ?$ [$ C+ J% U( N$ {
4. Convert the POST Form to a GET Form like this:

: w, w3 `9 S3 N/ I8 l6 q. {$ {

8 a& F" O8 o( ~( K5. Fill out comment however you like.

6. Press preview comment.

7. Instead of producing a url like this:

) y) q8 \- F/ `; [2 N0 x  F2 N# d  C8 xhttp://www.baseballmusings.com/cgi-bin/mt/mt-comments-pinto.cgi
. }3 F' q- V' i" I3 g$ r0 u& Y( E/ |
it will produce a URL like this (images used for formating purposes):


; z3 {. p, z' Z( K3 M, I' }% \
- B# i5 K2 e9 ~& D9 R5 EThe links on the produced pages are NOT nofollow.

8. Now, you may want to use a service like tinyurl or a redirect to hide what you are doing (not required)
) S  h' T6 t8 Z: N
9. Ping that URL to the Search Engines in splog posts, guestbooks, or however you think best.

Pretty freaking cool, huh?
9 y4 p$ N8 \! w; t3 o. [
[ 本帖最后由 teru1987 于 2006-7-22 16:23 编辑 ]