Blackhat SEO – Esrun

Although the captcha shown in the image to the left may appear like any other captcha, DynaDot are actually using a HTML table based captcha to defend against automated WHOIS lookups.

This works by splitting each character into multiple rows. Each row is it’s own table, with each cell (TD) set to a specific height, width and background color.

.

Continue reading DynaDot HTML table captcha…

The Facebook Like button allows people to share interesting sites they find, with their friends on Facebook. You can place a Like button on any web page and when a user clicks on it, a story appears in the user’s friends’ News Feed with a link back to your website.

Using some clever CSS, you can disguise the Like button to look like something else and trick people to click on the button

.

Continue reading Disguising a Facebook ‘Like’ link…

Someone on the WickedFire forums came across an interesting problem. He needed to automate the submission of data to a website which used a relatively simple looking captcha.

Usually for a simple looking captcha like this, you’d just feed the image straight through gocr which would output plain text. If the captcha is more complicated then you have to write your own OCR code.

This captcha however, is deceiving. It’s not actually an image. It’s a mishmash of HTML and CSS!

Continue reading HTML based Captcha…

Like my post on cheating Alexa, this post is a revisit of a subject I covered years ago; Referer spamming.

When you visit a site, your browser includes additional information with the request, this allows the site to serve a customised page based on the data passed. For example, it might serve up a different pages depending on whether you’re a Mac of Windows user.
.

Continue reading Referer (Referrer) spamming…

This post shows how I use multiple IP addresses to create fake Slashdot accounts and have them automatically vote on stories. It’s similar to how I cheated Reddit but with an extra step – using and checking valid email accounts.

.

Continue reading Cheating Slashdot with automatic voting…