Destroying Web 2.0, Social News and Online Directories: Referrer Based Cloaking
|
| |
![]() | |
I thought long and hard about posting this article, but I decided I’m in favor of it. It’s not my big money trick, but I’ve found it useful, and will share it with my readers. I was actually going to sell an implementation of this, but what can I say. I’m generous. In this article, I will cover how to use a referrer to cloak your data, getting the maximum backlinks, and generating the least amount of e-friction. This has the capacity to be an incredible threat to the current Web2.0 infastructure, as well as a threat to the currently existing infastructure of online directories.
The Basic Stages of Exploitation
- Writing the articles - One article for each potential victim, or one a method of automatically determining the output.
- The Categorization - Deciding who gets sent where, and what the referrer strings look like.
- The Redirected Output - Depending on their referrer string, you pull different data.
- The IP Bind.
- The Profit.
Social News Sites, and their Exploitation
Now, getting backlinks to different pages in a site is lovely and fine. But sometimes, you want a single article or page to rank high, and not the site itself. So you need backlinks going into THAT page, and not the site in general. So here’s what you do.
- Pick out your top 3-5 highest PR social news sites, regardless of their niche. The closer they are together in niche, the better, since you can make your anchor text similar.
- Write an article for each. Depending on your purposes, you can either try and make them good enough to rank, or just barely good enough to pass the spam filters.
- Take a look at what each site’s referrer string is going to look like. In most cases, you can just use the domain name.
- Code your redirection script. An example(note: this is untested code) would be
<?php
if(stristr($_SERVER[’HTTP_REFERRER’],”digg.com”)!==FALSE)//check to see who is in the referrer
{
echo file_get_contents(”./digg.txt”);//the digg article
}
?> - Submit the articles to each site, using the SAME URL.
- When the user comes, they will be sent to the proper article for their respective site. At this point, use a mysql database to forever bind their IP(or drop a cookie), so that any time they access it in the future, they will see the same article.
- Note: This can also be applied to web directories. Obviously with only 1 article for all of them. Now, the next section will include a different way to exploit web directories.
Web Directories(Faking Reciprocols): The ability to program in PHP/CuRL is best for this.
- Make some kind of autosubmitter software. Home-rolled is the best for this. The first time, use a fresh e-mail and IP. You’ll see why.
- Submit a junk domain, with no output. All it should have in it is a unique ID for each directory. Record which domain gets which unique ID. The page you’re sending them to records the IP that came in to check for the reciprocol link, and which ID/Domain it was. Insert all of this into a database.
- Submit your real domain. Extract the reciprocol link text that they desire, and put that into the database, matching it up to the IP/domain.
- Have your website query the database for incoming IPs/domains. Whenever one is matched to a directory, have it output the reciprocol link text.
- Now, the referrer part. Check ALL incoming referrers to see if they contain any domain from one of the directories you submitted to. If they do, insert that IP into the database, using the same reciprocol link text and domain that you used for that site before.
- Voila. Now, whenever the admin comes in to check on your site, to see if it has the proper reciprocol link text, it will show up. Any other user, or search engine spider, and it will not see it at all. If the software itself checks, same deal. It will see the same link.
Conclusion
I left a lot out of this, so it will still be useful in the future. If you think these concepts aren’t really useful, or aren’t that interesting, you’re not using your imagination. Think about it.





















December 13th, 2007 at 2:01 am
The second one works nicely if you’re emailing and asking for links as well. Just say “hey I’ve added a link to my site for you do you mind doing the same for me?” All the will cloaking the link so the enignes don’t see it. A kind of reverse cloaking. Showing the engine no link and the users links
No more reciprocals.
December 22nd, 2007 at 1:20 am
we do something very very similar involving fake blogs, rotating “related reading” boxes and cloaking. its incredibly effective.