Moveable Type Backlink Exploit

[复制链接]
查看: 392   回复: 0
发表于 2006-7-22 16:22:25 | 显示全部楼层 |阅读模式
Do you want free backlinks? Does the Pope shit in the woods?; x9 Z: W  O: ^) t8 X8 t+ T
, }' ^& m  G* C, y! T3 [5 L3 I
Boogybonbon has found a way to exploit the preview comment form to create backlinks from Movable type blogs.7 ^; ]- B/ w0 q8 X5 b4 s

" F) B+ K8 Y4 N  X! dFrom the post, MovableType preview button good for back links:: G4 X9 E$ M0 @* L7 r
As long as the blog is not a MovableType 3.2/3.x the blog will give a nice URL that you can publish into a ping list and get indexed for back links. This is because the MovableType 3.x uses JavaScript to convert tags into a preview comment field and as we all know search engines cant see that.
4 t' p/ t7 K# J  A' Q" a8 \: N' Y, `4 d* W- ]; U& x
Needles to say it only took me about 15 minutes to find 6 blogs with PR 5-8 and process the forms over to GET then post the URL’s into a couple ping sites.

$ y' y4 o' d! S7 l6 e; d2 j1 [. O; |* y
Here’s how it works:
9 i: z7 A/ l  b' t8 [0 \7 p
: [4 n$ i0 Q' E9 k0 v8 f1 m; cThe preview comment button on movable type blogs uses the POST method but search engines require the GET method to index a URL. So, what you need to do is:
- E: g( [, F8 {% d. [$ u7 H3 N( q
. A& G  I( g: h# n; C& Y- @1. Download the firefox extension webmaster tools to convert the POST forms to GET forms.   i: T* t9 l" S! y9 ^. R

# H- e8 u; R0 A# A2. Find Movable type blogs.- l* A& v6 l% p( k% ^: W) Z" s9 @
& q/ c3 P4 U; U; F
3. Open The “preview Comment” in a new window.
" H( p$ W; e2 ?' A1 V' s  ]* n. t* T9 U( e) h
4. Convert the POST Form to a GET Form like this:' Y2 G7 `3 n- v& ?1 t
' R- ~9 M/ E- L* S3 m
Moveable Type Backlink Exploit
+ J0 V4 D3 t9 ~' p( g8 b5 Q/ r, k2 R1 e. o- A4 B# a
5. Fill out comment however you like.
2 ?, r+ F, A2 H' p1 d
# b9 N0 I  q0 B/ m, f& l6. Press preview comment.
* `/ J+ p6 \5 y, c9 ]" N% j% g5 o) m4 g# l+ h0 a2 Z7 |" j
7. Instead of producing a url like this:
& A% S4 y- Q+ a; Z7 \) C
4 d% k$ n0 S0 @& b% N# Zhttp://www.baseballmusings.com/cgi-bin/mt/mt-comments-pinto.cgi1 V$ w+ L9 j, H. g: R2 ~9 W8 \+ |: _

6 c5 l3 n1 J/ T9 m3 D) o6 Z5 s5 tit will produce a URL like this (images used for formating purposes):$ M1 Q3 w& I: d5 r. f4 f

- u3 k1 D' S9 k# _: F+ B  y" L+ i- UMoveable Type Backlink Exploit
  o2 P! X) K+ b4 ~! ^6 u
1 l; _' `: J0 E% A- vThe links on the produced pages are NOT nofollow.
/ L# r; B; v* _" w1 N
$ S% s0 L; I  l$ \  H' u8. Now, you may want to use a service like tinyurl or a redirect to hide what you are doing (not required) 0 w! r& F0 z% f2 K( W
/ R# _9 ~  A$ H1 P
9. Ping that URL to the Search Engines in splog posts, guestbooks, or however you think best.! t8 _/ f2 z6 v6 ^( K( c

- |2 ?: U+ G3 I7 Z9 f: M5 i2 xPretty freaking cool, huh?
( u5 l/ o$ c* }9 k1 n
  p8 G( ?! G1 l$ [3 G7 `) C
[ 本帖最后由 teru1987 于 2006-7-22 16:23 编辑 ]
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则