Jump to content

hustla

Members
  • Posts

    12
  • Joined

  • Last visited

    Never

Profile Information

  • Gender
    Not Telling

hustla's Achievements

Newbie

Newbie (1/5)

0

Reputation

  1. Found a much easier solution to spoof a referer via activex althought it does require you to enable the intilize and script control that are marked not safe option in ie settings. Don't know much about active x controls so if you guys know how to convert this small script to a control the user can install so they don't have to enable this option that would be great otherwise i guess i will spend a few hours reading. thanks below is the source. forgive the spelling to lazy to fix. <SCRIPT language="Javascript"> function spoofit() { var target; var referer; target = document.getElementById('url').value; referer = document.getElementById('ref').value; var header = "Referer: " + referer + "\n\r"; var objIE = new ActiveXObject("InternetExplorer.Application"); objIE.Visible = true; objIE.Navigate(target, 2, "", "", header); } </SCRIPT>
  2. read a little more and i believe its a proxy issue. is their any other methods you guys know of to spoof the referer without a forward proxy.
  3. sorry about that thanks did not see
  4. this is the article i followed http://www.cgisecurity.com/lib/XmlHTTPRequest.shtml
  5. Im tring to get java script to spoof a referer via the XMLHTTP object but i cannot get it working properly.  here is an example that wont work yahoo is the target and google is the fake referere this is the location of the script http://thisfileshost/spoof2.php <script type="text/javascript"> var x = new ActiveXObject("Microsoft.XMLHTTP"); x.open("GET\thttp://www.yahoo.com\tHTTP/1.0\r\nHost:\twww.yahoo.com\r\nReferer:\thttp://www.google.com\r\n\r\nGET\thttp://nosuchhost/\tHTTP/1.0\r\nFoobar:","http://thisfileshost/spoof2.php",false); x.send(); alert(x.responseText); </script> not sure what im missing here i get a file not found error 404  Thanks guys
  6. thats what i figured. guess i will go the java script way.Unfortantly in firefox you can't even spoof the referer unless you install a plugin. ohh well good old i.e security. 
  7. found a way using java script and the httprequest object but thats it. would rather not use that.
  8. yea i've tried that. i really dont think their is a way to do this. i could get the server to spoof the get request but i want the clients get header to modified. let me know guys
  9. OK what i want to do is spoof the referer on a redirect I tryed this header("Location: www.something.com") header("Referer: www.something2.com") but what happens is it loses the referer after the redirect i sniffed it with etheral see below Hypertext Transfer Protocol     GET /members/links/pluginfeeds.php?ekgsso HTTP/1.1\r\n         Request Method: GET         Request URI: /members/links/pluginfeeds.php?ekgsso         Request Version: HTTP/1.1     Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*\r\n     Referer: http://192.168.1.102/\r\n     Accept-Language: en-us\r\n     UA-CPU: x86\r\n     Accept-Encoding: gzip, deflate\r\n     User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)\r\n     Connection: Keep-Alive\r\n     Host: www.featuredmemarea.com\r\n     \r\n As you can see from above 192.168.1.102 is me not what i specifed in the php header. Is their anyway to create a GET header like above except where i modify the referer in php. Thanks
  10. ok i think i might know what the problem is. I have two forms inside the page how do i map the button to the appriate form action ok i finnaly solved the problem ... this site im making is getting big so im seperating each part of the web page and incudeing them based on parameters. What was casusing the problem was that i had a form inside another form therefore on a submit it took the first forms action instead of the secounds action url. Thanks guys im so glad this damn problem is over it was killing me.
  11. Yea i considered that but its killing me why this is not working i tyed the same method on a different page and it worked. let me know if you guys come up with any other ideas i might have to use your suggestion.
  12. OK guys at one point i hade this working but for the past 3 hours i can't get it to work anymore. What i want to do is simply have a form where the action url has variables that get stored in the $_GET global but the form data in the $_POST. for example <form action="?MyAds&CurrentPage=CreateAd" method="post" enctype="multipart/form-data"> i want to access CurrentPage and MyAds in the $_GET but on sumbit the $_GET is not being set its null and i have no idea why please help me out here im using php5. The post data on the form is indeed being saved which is how i want it but im using the $_GET for site navagation. Thanks
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.