OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] search engine proxy

From: Nate Campi (natewired.com)
Date: Wed Jun 23 2004 - 10:12:27 CDT


Geo. wrote:

> I believe it was on this list that someone once mentioned a way to use
> either google or yahoo as a proxy server by typing in something in the
> address bar of a browser.
>
> Anyone recall this?

I think I know what you mean. Portal-type and search providers often
have HTTP servers meant for logging and redirecting clicks on search
results. Spammers and similar ppl who wish to hide the real destination
of a URL abuse these services. It can be quite hard to prevent this
abuse. :(

You'd have a URL something like
http://redirect.foo.example/redirect.cgi?http://spam.phishing.evil/ccinfo.html

I choose not to share any information on abusing these services, not
because it's particularly secret, but because I don't really want to
share it with kiddiez who don't already know how to find this information.

Nate

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html