pretty crazy Google SEO hole got plugged - GoFuckYourself.com

lezinterracial · 04-08-2018, 06:18 AM

In a nutshell, looks like he found a hi ranking site, found an open redirect, then pinged his site through the open redirect.

Only $1337 reward.

I am wondering how many people were already using this trick.

Google bug bounty for security exploit that influences search results - Tom Anthony

freecartoonporn · 04-08-2018, 09:54 AM

he could have made much more than that.
damn those whitehats

Tube Ace · 04-08-2018, 11:51 AM

Saw this the other day. Very surprised the guy didn't exploit this.

shake · 04-08-2018, 05:07 PM

Quote:

Originally Posted by Tube Ace

Saw this the other day. Very surprised the guy didn't exploit this.

Yup, could have made millions easy.

Bladewire · 04-08-2018, 06:14 PM

Great thread as always lezinterracial i read that article from beginning to end and back again, thank you.

I'm shocked , and delighted, that it took Google 6 months to fix this AND they only paid $1,337 for something that is going to astronomically change the quality of Google's search results.

@Tube Ace looking at Google's response, including their denial of importance, length of time to fix, and miniscule bounty, I'm betting there are similar variants of this wide open because Google's foes feel similar behavior has many legitimate uses "..we were unable to get a definitive decision, if it would be possible to address this behavior with the redirect chain without breaking many legitimate use cases."

So Google thinks similar off domain/cross domain redirect chains to unrelated domains have legitimate uses, even after this bug... interesting.

SIK · 04-08-2018, 07:00 PM

Quote:

Originally Posted by lezinterracial

I am wondering how many people were already using this trick.

I remember back in the day, during my tampering with penis pills and such stuff, some of us "used that trick" to make sure we get the cookie saved on surfer's computer.

It came down to making MY site navigation something like:

http://www.penis-pills-mainsite.com/....COM/home.html
and all links in main menu like that

never imagined it could be done for much more than just cookie shit

Paul&John · 04-08-2018, 10:51 PM

lol and got a l33t reward for this ahahah

bns666 · 04-08-2018, 11:53 PM

Quote:

Originally Posted by freecartoonporn

he could have made much more than that.
damn those whitehats

my first thought also.

also that wasn't some super secret, there were people selling this as seo service on fiverr few years ago.

PornDiscounts-V · 04-09-2018, 02:13 PM

What a dumbass

CaptainHowdy · 04-09-2018, 02:46 PM

Quote:

Originally Posted by PornDiscounts-V

What a dumbass

More money, more problems?

geedub · 04-10-2018, 07:17 AM

They pay $1337 on purpose. Any old schooler should be able to recognize.

Klen · 04-10-2018, 07:23 AM

Quote:

Originally Posted by geedub

They pay $1337 on purpose. Any old schooler should be able to recognize.

My Skype id is misspell of it

WiredGuy · 04-10-2018, 08:41 AM

Quote:

Originally Posted by lezinterracial

In a nutshell, looks like he found a hi ranking site, found an open redirect, then pinged his site through the open redirect.

Only $1337 reward.

I am wondering how many people were already using this trick.

Google bug bounty for security exploit that influences search results - Tom Anthony

Great article, thank you for sharing this.
WG

04-08-2018, 06:18 AM	#1
lezinterracial Confirmed User Industry Role: Join Date: Jul 2012 Posts: 3,077	pretty crazy Google SEO hole got plugged In a nutshell, looks like he found a hi ranking site, found an open redirect, then pinged his site through the open redirect. Only $1337 reward. I am wondering how many people were already using this trick. Google bug bounty for security exploit that influences search results - Tom Anthony __________________ Live Sex Shows

04-08-2018, 09:54 AM	#2
freecartoonporn Confirmed User Industry Role: Join Date: Jan 2012 Location: NC Posts: 7,683	he could have made much more than that. damn those whitehats __________________ SSD Cloud Server, VPS Server, Simple Cloud Hosting \| DigitalOcean

04-08-2018, 10:51 PM	#7
Paul&John Confirmed User Industry Role: Join Date: Aug 2005 Location: YUROP Posts: 8,609	lol and got a l33t reward for this ahahah __________________ Use coupon 'pauljohn' for a $1 discount at already super cheap NameSilo! Anal Webcams \| Kinky Trans Cams Live \| Hotwife XXX Tube \| Get your Proxies here

04-09-2018, 02:13 PM	#9
PornDiscounts-V Confirmed User Industry Role: Join Date: Oct 2003 Location: L.A. Posts: 5,744	What a dumbass __________________ Blog Posts - Contextual Links - Hardlinks on 600+ Blog Network * Handwritten * 180 C Class IPs * Permanent! * Many Niches! * Bulk Discounts! GFYPosts /at/ J2Media.net

04-10-2018, 07:17 AM	#11
geedub Confirmed User Industry Role: Join Date: Jun 2005 Location: concrete jungle Posts: 3,489	They pay $1337 on purpose. Any old schooler should be able to recognize. __________________ Reliable web host that actually cares, tell em geedub sent ya. Vacares

04-08-2018, 11:51 AM	#3
Tube Ace So Fucking Banned Industry Role: Join Date: Nov 2008 Location: with your dream girl Posts: 4,941	Saw this the other day. Very surprised the guy didn't exploit this.

04-08-2018, 06:14 PM	#5
Bladewire StraightBro Industry Role: Join Date: Aug 2003 Location: Monarch Beach, CA USA Posts: 56,229	Great thread as always lezinterracial i read that article from beginning to end and back again, thank you. I'm shocked , and delighted, that it took Google 6 months to fix this AND they only paid $1,337 for something that is going to astronomically change the quality of Google's search results. @Tube Ace looking at Google's response, including their denial of importance, length of time to fix, and miniscule bounty, I'm betting there are similar variants of this wide open because Google's foes feel similar behavior has many legitimate uses "..we were unable to get a definitive decision, if it would be possible to address this behavior with the redirect chain without breaking many legitimate use cases." So Google thinks similar off domain/cross domain redirect chains to unrelated domains have legitimate uses, even after this bug... interesting.