Acest articol este publicat atat in romana cat si in engleza.

Yahoo redirects are and have been continuously used in spam tehniques, for phishing and black SEO. Even though Yahoo is struggling to solve this problem, they are easy to find. When I say ease i mean seconds not minutes or hours

The whole trick is to know how a patched link looks like.

Its not hard at all. All you need is:

Firefox

Link Gopher add-on

A search engine.

How does a link that can be used as for a redirect looks like?

http://us.ard.yahoo.com/SIG=15temu9ra/M=289534.6253107.7244481.6080815/D=classreal/
S=750052198:FOOT/Y=YAHOO/EXP=1232849833/L=BmyXB86.ODX4VzI3SXtvrR9kVmjCm0l7r4kACp1e/
B=NoaQBNj8a.0-/J=1232842633729605/K=pIWiCLQq81S96lmhwDqmiw–
/A=2650127/R=2/SIG=11lp7krrc/*http://docs.yahoo.com/info/copyright/copyright.html

How does a link that can NOT be used as for a redirect to a site outside *.yahoo.com look like?

http://rds.yahoo.com/_ylt=AkWscG8XXla3AoABf80g_WeHHwx.;_ylv=0/
SIG=11idii63e/EXP=1232929280/**http%3A//hk.knowledge.yahoo.com/

How can we tell which link can be used? Notice this part of the link (from the first example):

SIG=11lp7krrc/*http://docs.yahoo.com/info/copyright/copyright.html After /* there follows the unaltered link to a diffrent domain.

The second link is a bit diffrent.

1232929280/**http%3A//hk.knowledge.yahoo.com/

Don’t mind the number of “stars”. This is what tells us that this redirect is useless: http%3A//.

All links from redirect that start with http%3A// cannot be used for sites outside yahoo.com.

I can bet that there wont be more then a week from now (the moment of posting the article) and this bug will be fixed cause we noticed a sudden love from Yahoo staff who is kind enough to pay us visits almost every day

Versiunea in limba romana:

Redirecturile Yahoo au fost si sunt in continuare folosite pentru spam, phishing si black seo. Cu toate ca Yahoo se chinuie sa rezolve problema redirecturilor, acestea sunt usor de gasit. Cand spun usor ma refer la secunde nu minute, nu ore.

Toata smecheria sta in cunoasterea aspectului unui link de redirect deja patchuit.

Nu este greu. Aveti nevoie de urmatoarele:

Firefox

Link Gopher add-on

Un motor de cautare

Cum arata un link ce poate fi folosit la redirect?

http://us.ard.yahoo.com/SIG=15temu9ra/
M=289534.6253107.7244481.6080815/D=classreal/S=750052198:FOOT/
Y=YAHOO/EXP=1232849833/L=BmyXB86.ODX4VzI3SXtvrR9kVmjCm0l7r4kACp1e/B=NoaQBNj8a.0-
/J=1232842633729605/K=pIWiCLQq81S96lmhwDqmiw–
/A=2650127/R=2/SIG=11lp7krrc/*http://docs.yahoo.com/info/copyright/copyright.html

Cum arata un link ce NU poate fi folosit la redirect catre un site din afara *.yahoo.com?

http://rds.yahoo.com/_ylt=AkWscG8XXla3AoABf80g_WeHHwx.;_ylv=0/
SIG=11idii63e/EXP=1232929280/**http%3A//hk.knowledge.yahoo.com/

Cum ne dam seama ca acest link poate fi folosit? Observati aceasta portiune:

SIG=11lp7krrc/*http://docs.yahoo.com/info/copyright/copyright.html in cazul primului exemplu. Dupa /* urmeaza linkul nealterat catre un alt subdomeniu.

Cel de-al doilea link este putin deosebit.

1232929280/**http%3A//hk.knowledge.yahoo.com/

Nu luati in calcul numarul stelutelor (*). Ceea ce ne spune ca acest redirect este inutilizabil se afla aici http%3A//.

Toate linkurile din redirect ce incep cu http%3A// nu pot fi utilizate pentru site-uri non-yahoo.com.

Dupa aparitia acestui articol va garantez ca in maxim 1 saptamana se va rezolva in mare parte aceasta problema pentru ca Yahoo a inceput sa ne iubeasca blogul si sa ne viziteze zilnic.

Related Posts

• January 26, 2009 -- Yahoo! again – bad settings?
• January 22, 2009 -- Yahoo! again – XSS
• December 8, 2008 -- Yahoo.com SQL Injection, XSS [se intampla si la case mari]
• September 1, 2010 -- Hacker Uses XSS and Google Street View Data to Determine Physical Location
• February 21, 2010 -- Se poate sparge parola de Yahoo?