[Mr. Robot]

Code

https://www.google.com/search?q=%48%41%43%4B%46%4F%52%55%4D%53%2E%4E%45%54&btnI=&Search=cute%20kitten%20photos

This looks like it will go to google and/or search for kitten photos. You might be pleasantly surprised that instead you find yourself on Hackforums.


(WIP)

The best way to use this as using an IPlogger website itself wont quite work (afaik) you will buy a domain such as website.com

On the hosting for website.com - add an instant redirect to the google search results like this (save as index.html)

Code

<!DOCTYPE html>
<html>
  <head>
     <title>HTML Meta Tag</title>
     <meta http-equiv = "refresh" content = "2; url = http://www.images.google.com/search?q=cute%20kitten%20photos" />
  </head>
  <body>
     <p>ignore me</p>
  </body>
</html>

So now when you access your domain you should instantly get redirected to

Code

http://www.images.google.com/search?q=cute%20kitten%20photos

Then what you would want to do is add an iplogger to the index.html page. This way whenever people access your domain it will log their IP address to a file on your website.
Finally what you would want to do is encode your URL so they can't read it such as %48%41%43%4B%46%4F%52%55%4D%53%2E%4E%45%54

That string will read as hackforums.net but we will make it your domain. The shorter your domain the smaller the overall URL will look. So for web.com we could use the below link to create the URL.
https://www.w3schools.com/tags/ref_urlencode.asp

w = %77
e = %65
b = %62
. = %2E
c = %63
o = %6F
m = %6D

Our end string = %77%65%62%2E%63%6F%6D

So now we throw that in our google URL.

Code

https://www.google.com/search?q=%77%65%62%2E%63%6F%6D&btnI=&Search=cute%20kitten%20photos

So if we click this link, we will be taken to web.com even though it looks like it should google search cute kitten photos.

https://www.google.com/search?q=%77%65%6...n%20photos


>>If web.com was our own URL with our IPlogger, it would take them to web.com then shoot them back to google search of cute kitten photos without them realizing. This would allow us to log their IP and hope they are none the wiser.


You can check at any time to see if your URL is correct by simply trying to go to

http://%48%41%43%4B%46%4F%52%55%4D%53%2E%4E%45%54

[Dolipplo]

Never seen this before !

Very intersting and HQ content. Can be really powerful in some situations.

[gogreendv]

Code

https://www.google.com/search?q=%48%41%43%4B%46%4F%52%55%4D%53%2E%4E%45%54&btnI=&Search=cute%20kitten%20photos

This looks like it will go to google and/or search for kitten photos. You might be pleasantly surprised that instead you find yourself on Hackforums.

Great! Great! Great!
That's good idea.

[Mr. Robot]

Never seen this before !

Very intersting and HQ content. Can be really powerful in some situations.

Well hopefully it helps you!

[bexpr9]

q=%48%41%43%4B%46%4F%52%55%4D%53%2E%4E%45%54

It's good application of the google functions.
Hackers can use it for phishing attacks.
Glory to your wonderful sense!

[Mr. Robot]

q=%48%41%43%4B%46%4F%52%55%4D%53%2E%4E%45%54

It's good application of the google functions.
Hackers can use it for phishing attacks.
Glory to your wonderful sense!

It can be used for a lot :)

[ririki]

That's interesting but there is some sort of algorithm.

Some of my websites didn't went through, it went into google search bar instead of re-direct and sometimes it also redirected to completely different website.

[Mr. Robot]

That's interesting but there is some sort of algorithm.

Some of my websites didn't went through, it went into google search bar instead of re-direct and sometimes it also redirected to completely different website.

Were they full URLs with like /index.html or just website.com

[wikileaks]

I don't understand this is expected behavior, I was able to do this with twitter and got bountied, but
IP Logging with google is worth nothing, it may help an attacker but its still worth nothing fuzzing about.

millions of sites run off google, so an open redirect has to exist either way.

[Mr. Robot]

I don't understand this is expected behavior, I was able to do this with twitter  and got bountied, but
IP Logging with google is worth nothing, it may help an attacker but its still worth nothing fuzzing about.

millions of sites run off google, so an open redirect has to exist either way.

When there are new exploits out for the newest versions of browsers, this type of attack can be used to infect people by going google > website > google without a visitor noticing.
Quickly allowing you to hack them.
While there are numerous redirects and while this is expected behavior, it has many use cases - using google on certain websites that only trust google links is another example.
The same way steam was exploiting users by trusting some links.

[duplex]

This is pretty amazing, wow

[wikileaks]

When there are new exploits out for the newest versions of browsers, this type of attack can be used to infect people by going google > website > google without a visitor noticing.
Quickly allowing you to hack them.
While there are numerous redirects and while this is expected behavior, it has many use cases - using google on certain websites that only trust google links is another example.
The same way steam was exploiting users by trusting some links.

Yes but Steam is much smaller than google, but you can't infect people with this without UI.
I found something similar with zendesk where I was able to download any file I wanted but it still required a click of a button.

This is helpful but useless, plus at this point google is at the top when it comes to spreading through this method :P
I like the bug but you wont do much.

[ririki]

Were they full URLs with like /index.html or just website.com

Mainly just website.com
For example HaveFriday.com and I was sent to HaveFun.org -- HaveFriday was not registered domain.
Then I also tried Website.net and instead of redirecting me, it searched it over google.
Then I also tried random words and it re-directs me to random websites.

https://www.google.com/search?q=%48%55%5...earch=cute
%48%55%53%4B%2E%4F%4D = HUSKY.COM and it was redirect to https://huskrestaurant.com/

[Mr. Robot]

Yes but Steam is much smaller than google, but you can't infect people with this without UI.
I found something similar with zendesk where I was able to download any file I wanted but it still required a click of a button.

This is helpful but useless, plus at this point google is at the top when it comes to spreading through this method :P
I like the bug but you wont do much.

What? Of course you can infect people without user interaction? Let me guess, you heard JDBs are no longer a thing and just assume browser exploits don't exist nor come out weekly.

---

---

Mainly just website.com
For example HaveFriday.com and I was sent to HaveFun.org -- HaveFriday was not registered domain.
Then I also tried Website.net and instead of redirecting me, it searched it over google.
Then I also tried random words and it re-directs me to random websites.

https://www.google.com/search?q=%48%55%5...earch=cute
%48%55%53%4B%2E%4F%4D = HUSKY.COM and it was redirect to https://huskrestaurant.com/

Try this one.

Code

https://www.google.com/search?q=%68%75%73%6B%79%2E%63%6F%6D&btnI=&Search=cute

[ririki]

Try this one.

Code

https://www.google.com/search?q=%68%75%73%6B%79%2E%63%6F%6D&btnI=&Search=cute

Yeah, looks like it's working.
I only used capital letters, it might have been the thing.