19
The Ultimate BlogRush Exploit Guide
Posted by k | Posted in Uncategorized | Posted on 19-09-2007
Unless you have been living under a stone, you’ve already heard about ShoeMoney’s BlogRush.
To keep things short, I also believe it will fail: when John Chow is getting a 0.3 Click Rate now, imagine when all blogers start developing ad blindness to that clumsy box.
Besides that it is also not getting much karma due to the fact that it is clearly a benefit the rich and powerful tool.
We can, however, turn it into a great Black Hat tool to promote your nearly bought mfa domain.
Here’s how to do it:
Faking referals
One thing that immediately called my attention was the fact you were giving credits to your referrals, as far as the 10th generation. So, why not be greedy and keep these credits for yourself? Yes, it is possible. Just register 10 accounts and refer yourself from each one each time, from the first one till the 10th one.
Faking traffic
Now we need traffic. Just run this code for a couple of minutes and watch the magic happen:
// BlackHatDomainer.com //
$ref = 'http://www.site.com/'; //your site
$id = 12345678; //your blogrush id
for( $i = 0; $i < 5000; $i++ ) {
echo $i.'-';
$s = substr( rand().rand(), 0, 16 );
$url = 'http://widget.blogrush.com/box.php?f='.$id.'&url='.urlencode( $ref ).'&ref=&r=0.'.$s;
$fun = tor_tunnel($ref,$url);
echo $fun."\r\n";
}
function tor_tunnel($ref,$url){
$useragent = array('Mozilla','Opera','Microsoft Internet Explorer','ia_archiver');
$os = array('Windows','Windows XP','Linux','Windows NT','Windows 2000','OSX');
$agent = $useragent[rand(0,3)].'/'.rand(1,8).'.'.rand(0,9).' ('.$os[rand(0,5)].' '.rand(1,7).'.'.rand(0,9).'; en-US;)';
$torad = '127.0.0.1:8118';
$timeout = '300';
$go = curl_init();
curl_setopt ($go, CURLOPT_PROXY, $torad);
curl_setopt ($go, CURLOPT_URL, $url);
curl_setopt ($go, CURLOPT_HEADER, 1);
curl_setopt ($go, CURLOPT_USERAGENT, $agent);
curl_setopt ($go, CURLOPT_REFERER, $ref);
curl_setopt ($go, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($go, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt ($go, CURLOPT_TIMEOUT, $timeout);
curl_setopt ($go, CURLOPT_CONNECTTIMEOUT, 100);
curl_setopt ($go, CURLOPT_COOKIEJAR, "cookie.txt");
curl_setopt ($go, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt ($go, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt ($go, CURLOPT_HTTPPROXYTUNNEL, true);
curl_setopt ($go, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);
$syn = curl_ex*ec($go);
curl_close($go);
return $syn;
}
?>
Notice how I use random OS and USERAGENT codes. Also, forget proxies, this code is using TOR!
Note: You will need Tor, Privoxy and PHP with CURL. In case you have only PHP use fileopen and a list of proxies, or no proxy at all. It will work fine, lol.
Note2:Also remove the * on “curl_ex*ec”. I can’t write c u r l _ e x e c in here or I’ll get a 503 from my host company watchdog mod_security script! :S
Faking posts
Finally, we need clicks! That’s easy; you just have to fake your post titles. Here’s how to do it: just fake an RSS channel.
Save the above as www.yoursite.com/site.rss and direct BlogRush there.
Acknowledgments: Thanks go to Blackhat’s Diary for easing my task (I didn’t had to sniff http requests to find the url and parameters to pass) and also for John Chow for the idea of a custom rss, although he made it the whitish way and didn’t cloaked the urls.
Update: Blackhat’s Diary dude, what a bad temper you got! I got only the URL from your code and, besides that, my agent/os random function is 10000 times better than yours. Also, 99% of people out there have CURL and NO file_get_contents.
Update (04Oct07): CURL code updated.
