cookie stuffing普及篇(二)

How and Why cookie stuffing works
& g; P2 i0 s" n  L- a
Cookie stuffing,depending on the method used,works in different ways.The ultimate goal however is to get that darned affiliate cookie onto someones computer.

Cookies are passed in whats called a header.A web page doesn't have to be rendered for a header to be passed.Because of this,methods like image stuffing exist.The browser of your victim thinks is getting an image,but instead it gets a header with instructions to place a cookie on the computer.
& V. l& l+ `7 C1 B8 F
& q0 Q. Q* W! c) u  |7 K+ IIn other methods of stuffing,you are actually opening up your affiliate url in a new window or in a frame.Because the url is actually opened,a cookie is placed.Not only is the header processed for cookie placement,the html is also rendered by the browser.In most cases,this is visually detectable by the user.Like in the case of javascript,a pop up window is used to display your affiliate url.Talk about annoying.

2 U1 e2 B8 V1 ZThere are other methods you can use like a 1 pixel iframe.This is less detectable visually,but very easy to spot if someone went digging through the source for it.

Summary: a cookie is passed via a http header.A browser will not ignore a cookie header unless its security settings are instructed to do so.When the browser asks a server for an image and is returned with a webpage,a header is sent before the webpage.The browser aknowledges the header,and disregards the rest of the content.Thus a cookie is placed.

已經翻譯的不錯了

lol 翻譯的還可以看懂 不過看英文的還是要舒服一點。
: [3 U4 z# X9 c5 g- j+ Q+ @3 B以上只是講了cookie stuffing是如何工作已經為什麼會存在cookie stuffing。
; f1 P) h6 ]7 n; y2 s8 `/ L9 Z至於具體的方法很多人也可以寫出自己的程序出來。看了部分cookie stuffer代碼，感覺應該是cookie stuffing的高級用法了。
4 q# f3 ^5 L, z( D  l6 V, qmoder也說了正道即是王道，還有某前輩也說了搞正規，所以關於cookie stuffing以後不再提了

非常感謝，從小英文就不及格，看來要去進修一下了，

很blackhat的說，國外有人討論也是很隱蔽的討論
" p/ U+ h( Y. B+ x9 y一個簡單的例子：

1. http://www.im286.com/thread-3030307-1-1.html

複製代碼

以後Cookie Stuffing話題不會再公開討論，有興趣的朋友可以私下和我討論。

我要瞭解cookie stuffing，哪裡可以看到

謝謝了，。先看看再說。

。。。。。。。。。。掘墓啊