Re: Google security concern?
Ben Nelson <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Empty Floatbag wrote: | The search-bots are not picking up on the fact that | these servers have no "real" content. I am guessing | that they are using some sort of scripting to generate | thousands of fake pages with fake content on dozens of | hostile servers. What content I have seen is very | similar to the SPAM language, where it is randomly | coherent, yet still gibberish - as well as what looks | to be common search phrases/terms, with mis-spellings | included (the worst ones). | This could be accomplished fairly easily with a php page that detects the user-agent of the search bot and spits out legitimate looking content for it. Then, turn around and spit out malicious content for everyone else. Another (somewhat) related thought: Increasing your link count could be accomplished by simply releasing a Santy variant which places links to your site on vulnerable sites. - --Ben GCFW -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFB0z5M3cL8qXKvzcwRAoUHAKDM8cGWQ2lkt1wi1Mu0HdfD/aXjjACg2MCB 40eoNhkqTrXlVxie+6yV5TI= =ZY6V -----END PGP SIGNATURE----- _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions