Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Ways to improve page rank, or deceptively get more users to your websites or away from your competition. Where you can discuss SEO (search engine optimization) issues as it relates to computer security. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
Pages: 12Next
Current Page: 1 of 2
How to have a CTR of 100% with AdSense
Posted by: sirdarckcat
Date: November 28, 2007 07:16PM

Well I dont know if this goes here.. if it doesnt... sorry.

http://www.sirdarckcat.net/asdfg.html

:D

CSS r0x!!

Greetz!!

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: g4b0
Date: November 30, 2007 02:30AM

Sorry, but I don't understend..

--
g4b0, linux user n. 369000
http://gabo.homelinux.com

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: digi7al64
Date: November 30, 2007 07:16PM

g4bo: he is just overlaying the image on top of the google ads using css.

----------
'Just because you got the bacon, lettuce, and tomato don't mean I'm gonna give you my toast.'

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: sirdarckcat
Date: December 01, 2007 05:17PM

yeap, is a CSS overlay.. and just to make it clear.. it's not against Google's Adsense rules, :), since you are not modifying the code of the ad, just the appareance of your site.

Greetz!!

edit:
vah, not compeltely legit, since..
"Clicks on Google ads must result from genuine user interest." :(

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat



Edited 1 time(s). Last edit at 12/01/2007 05:22PM by sirdarckcat.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: digi7al64
Date: December 01, 2007 09:51PM

css overlaying of ads is a subject that nobody seems to really give 2 hoots about, which is good. For eons (at least years anyway XD) this technique has been used by the savy SE to entice end users to malware or just increase end user patronage to sites which have purchased "per click" type basis advertising.

And again, it doesn't even have to be a specific AD the user needs to click, with css you can set the entire page (circumstances permitting of course) to trigger the onclick event. And in circumstances where JS is available you can capture the onclick event anyway and trigger it to remove the css which created the full screen overlay for that "CPC" advertising. This way the when the user clicks the any link of the page for the first time the ad is presented, they go wtf, click the link again and the real deal appears and they don't really care.

Also in circumstance where you can overwrite the official ads you always get a better CTR as users tend to trust those ADs more.

----------
'Just because you got the bacon, lettuce, and tomato don't mean I'm gonna give you my toast.'

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: KonTroL
Date: December 01, 2007 10:36PM

Anyone know anyone that has been kicked off of Adsense for this?

=======================
http://www.hackosis.com

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rsnake
Date: December 10, 2007 09:06AM

I think they only reason you haven't been nuked off is because you don't have enough traffic. Ratios above 1% are always suspect unless your traffic isn't noteworthy (then it could just be a statistical anomaly). So maybe if you ran this against only 1% of your traffic you'd have better chances of not getting caught.

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: sirdarckcat
Date: January 01, 2008 07:14PM

it's not my account dudes, it's just a test:
			google_ad_client = "pub-1234567890123456";

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rsnake
Date: January 03, 2008 11:07PM

Oh... well then it's not valid either way. Try with a real account and see what happens.

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: sirdarckcat
Date: January 08, 2008 03:58PM

Well, I'm amazed.

I made a test with a random ad_client, and after 6 days the account was banned.

I dont know who is the account holder, but.. he has nothing to do with this, I have contacted google to make them know they banned some guy that wasnt doing anything wrong.. I hope they fix this..

This is a DoS attack to all adsense customers, you can get your account banned if someone else cheats with your code :S

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rsnake
Date: January 08, 2008 05:35PM

Okay, that deserves a write-up. Can you write the steps? This is important info.

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Date: January 09, 2008 11:13AM

sirdarckcat Wrote:
-------------------------------------------------------
> Well, I'm amazed.
>
> I made a test with a random ad_client, and after 6
> days the account was banned.
>
> I dont know who is the account holder, but.. he
> has nothing to do with this, I have contacted
> google to make them know they banned some guy that
> wasnt doing anything wrong.. I hope they fix
> this..
>
> This is a DoS attack to all adsense customers, you
> can get your account banned if someone else cheats
> with your code :S

That really made my day for some reason, lol.


Awesome AnDrEw - That's The Sound Of Your Brain Crackin'
http://www.awesomeandrew.net/

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: sirdarckcat
Date: January 17, 2008 06:46PM

Well.. the steps are fairly simple..

I added an adsense code to one of my websites.. cheating the way it was stated here:
http://www.sirdarckcat.net/asdfg.html

It had a slightly different customer_id than mine.

It worked fine for a week, and then the ads stopped appearing, and "public service" adds started showing up.

I tried to add the code on other sites and domains, but the account wasnt generating any more adsense.

Google answered this:
Quote
Google
We understand that you may have questions about what Google is doing to prevent invalid click activity. You should know that our specialists carefully monitor clicks and impressions on Google ads in order to protect the interests of our advertisers, our AdSense publishers, and our users. To do this, we use both automated systems and human reviews, analyzing all ad clicks and impressions for any invalid click activity that may artificially drive up an advertiser's costs or a publisher's earnings.

Google's proprietary technology analyzes clicks and impressions to determine whether they fit a pattern of use that may artificially drive up an advertiser's costs or a publisher's earnings. Our system uses sophisticated filters to distinguish between activity generated through normal use by users and activity that may pose a risk to our AdWords advertisers. Some examples of this activity include clicks or impressions generated by unethical users, automated robots and traffic sources, publishers encouraging clicks on their ads, and scenarios where a malicious third party attempts to forge invalid clicks or impressions with a publishers identifier with the intent of harming this publisher. Our system enables us to filter out most invalid clicks and impressions, and our advertisers are not charged for this activity.

In addition to our automated system, we have a team dedicated to detecting invalid activity using several specialized tools and a wide variety of techniques based on extensive experience tracking and monitoring user behavior and analyzing scenarios. We continually upgrade our detection mechanisms to proactively combat invalid activity.
For more information about invalid click activity, we recommend visiting https://www.google.com/adsense/support/bin/topic.py?topic=8426 .

Furthermore, AdSense offers a feature called "Allowed Sites", which allows publishers who are concerned about misuse of their ad code (publisher id) to specify which sites their AdSense id may legitimately appear on. For more information on this feature, see http://adsense.blogspot.com/2007/09/allowed-and-clear.html .



You also may find additional information on Google's Ad Traffic Quality efforts at http://www.google.com/adwords/adtrafficquality/tech.html .

In particular, a forthcoming book chapter on "Online Advertising Fraud" specifically addresses concerns regarding sabotage of an advertiser (see bottom of page 19 in the section on "Detection" in the book chapter at http://www.google.com/adwords/adtrafficquality/files/crimeware.pdf):

"After filters have been applied and invalid clicks have been identified, additional actions may be
required. For instance, an AdSense publisher with a high percentage of invalid
clicks, or even just one that received potentially anomalous traffic that may or
may not be invalid may be inspected by an ad traffic quality investigator.
In certain cases, a relationship with a publisher may be automatically terminated
if unusual proportions of invalid clicks are attracted by the publisher's web site.
As such, ad traffic quality investigators need to also be mindful of potential
sabotage that may occur in which a malicious publisher attempts to generate
a large number of invalid clicks on a competing publisher's web site to make it
seem as if the competitor is attempting a click inflation attack."


I hope the above information demonstrates to you that the concern you brought up is well understood by Google and is taken into account in our AdSense fraud and abuse countermeasures.

So, to avoid being attacked, you need to disable all sites from showing your adsense ads besides yours..

Anyway a persistent XSS may change the ad "id" or make cheating on your site xD

Greetz!!

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: tx
Date: January 17, 2008 09:47PM

Quote

After filters have been applied
!?!?

-tx @ lowtech-labs.org



Edited 1 time(s). Last edit at 01/17/2008 09:49PM by tx.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: sirdarckcat
Date: January 20, 2008 01:14PM

I dunno, the e-mail has that too..
I supose it's "fi" :P

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: Anonymous User
Date: January 20, 2008 05:21PM

Almost, ffi looks like ffi. No idea how that could have slipped into the mail.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rsnake
Date: February 02, 2008 11:13PM

Okay, but what Google suggests isn't going to work and it's pretty scary that they claim it will. It's giving people a false sense of security. It's super easy to frame a page on the victim's domain (double iframes to place the tag in the right spot), or not send a referring URL. That "protection" wouldn't work unless the customer himself sees you iframing him (also possible to stop that possibility by removing the referrer in the iframe) or Google would have to stop showing ads to people who don't have referring URLs enabled.

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: How to have a CTR of 2000% with AdSense
Posted by: rohanpinto
Date: April 20, 2008 04:25PM

100% CTR is extremely low...

I can get a 2000% CTR ;-)
(with test ID's of course)

here's more...
i could get whatever CTR I wanted.. as low or as high... just impressions or clicks..and i could even target any adsense ID on any website...
example: i could give you a 2000% CTR with your adsense ID and target anydomain.com

what freaked me out when i started testing was the 2000% CTR... I figured out the math and then tried to obtain an even higher CTR.. but failed... so i guess the max CTR as of now is 2000%, I would not be surprised if I could get a even higher CTR...

if u dont believe me.. do the following:
PM me your adsense ID and a domain you wanna publish your ads on (if the domain is already banned by bigG, then i cant target ads on that domain)
add the target domain to your URL channel list (so you can track the impressions and clicks yourself - when you see the numbers grow.. you WILL believe... )
also add the target domain to your allowed sites list (or just select "Allow any site to show ads for my account")

and watch the count grow...



Edited 3 time(s). Last edit at 04/21/2008 04:23PM by rohanpinto.

Options: ReplyQuote
Re: How to have a CTR of 2000% with AdSense
Posted by: rohanpinto
Date: April 20, 2008 04:55PM

damn... what's even more evil would be getting thousands of publisher accounts banned by just giving them a extremely high CTR on their own domain...

damn damn damn !!! ... i'm getting evil thoughts now... I better take a chill pill for now...

(i tossed this exploit on another board too... but nobody even attempted to respond to it... )

but guys.. do respond... especially rsnake, id, awesomeandrew and mario... I wanna know your thoughts on this...



Edited 4 time(s). Last edit at 04/21/2008 04:36PM by rohanpinto.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rohanpinto
Date: April 20, 2008 05:31PM

should I inform bigG about this ?



Edited 1 time(s). Last edit at 04/20/2008 05:31PM by rohanpinto.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: fragge
Date: April 20, 2008 05:46PM

lol @ this guy above me.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rohanpinto
Date: April 21, 2008 04:04PM

lol@the guy above me too...

and if u dont believe me.. try me ;-)



Edited 1 time(s). Last edit at 04/21/2008 04:42PM by rohanpinto.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: majak
Date: April 21, 2008 04:46PM

lol @ the guy below me...;-)
If you want us to believe you, show some evidence. And I don't see much difference between 100% and 2000% CTR, both are far too much.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rohanpinto
Date: April 21, 2008 05:14PM

evidence !!

how do u want me to prove it.
just give me an adsense ID to use which you can track on your own... simple...



Edited 1 time(s). Last edit at 04/21/2008 05:23PM by rohanpinto.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rsnake
Date: April 21, 2008 05:46PM

The most important point is not whether you can or cannot get a CTR of 2000% but rather will you get paid for it. Having a high CTR is extremely easy, just click 20 times for every time the page loads. But the important thing is will Google pay out at anywhere north of 100%.

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rohanpinto
Date: April 21, 2008 05:59PM

I agree... now when google tracks it. a few things matter.

1.the source IP from where the click originated (when u use a DB of thousands of proxies,the source IP's would be random)

2.the referring URL (I can send any referring url i want... a simple google search query result page url would work)

3. the headers (easy to fake... in my test i created 3. 1 for ie 1 for firefox and 1 for safari and randomised them across multiple OS's)

4.the "ai" variable in the ad link. This variable is generated by bigG on every request. So when i run my bot and get the ai variable for each ad link each click generated would have a unique ai variable as formulated by bigG themselves.. it's not a random string that I generate..i get it and use the same..

5. the CTR. if i keep the CTR low.. very low... as low as 1% there probably would not be any red flag for investigation

6.getting paid for it.... I dont know... cant answer that one... maybe yes..if it's done very calculatedly...

PS: clicking 20 times for each page load does not give you a 2000% CTR. nor would hitting refresh on the browser increase the page impression count...

bigG may not payout anywhere north of 100%.. but the trick is in not doing 100% but doing 1% (I guess) 1% of a billion impressions is a lot of money...

I awaited a response for a long time and have already notified bigG about it. I am awaiting their email response... (shall keep u posted)



Edited 2 time(s). Last edit at 04/21/2008 06:03PM by rohanpinto.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rohanpinto
Date: April 22, 2008 01:22PM

OK... they got back to me.. exchanged a couple of emails on how it's done... setup a few demo's and i got this response:

[block]
Hello Rohan,

Thank you for writing in about this. We take issues like this seriously
and I have escalated your concerns to the appropriate team. Please feel
free to reach out to us if you have any concerns in the future.

Sincerely,

Wojtek
The Google AdSense Team
[/block]

is this the kind of generic email you get when u contact bigG about a exploit ?

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rohanpinto
Date: April 22, 2008 05:20PM



1,400% CTR. 0$ because I used a adsense ID after informing google that I would be doing this. they are monitoring the ID... and hence the 0$

proof enough lol@myself ;-)



Edited 2 time(s). Last edit at 04/22/2008 06:08PM by rohanpinto.

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: Malkav
Date: April 22, 2008 05:51PM

@rohanpinto

well, i write this kind of generic email by hand a hundred times a day, so i'd say it's more the result of a overworked analyst than a lack of interest. that's a nice find of you.

oh btw. the .gif is 403...

----------------------------------------------------------------------------------------------------------------

Those that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.
--Benjamin Franklin

Options: ReplyQuote
Re: How to have a CTR of 100% with AdSense
Posted by: rohanpinto
Date: April 22, 2008 06:08PM

hit refresh on http://www.merifiles.com/uploads/adsenseless-part-3.gif when it shows a 403.. it's got somethign to do with referrers and using the image host only on a specific domain..

I uploaded it on tinypic now.. @ http://i32.tinypic.com/i2j80n.gif

I have managed to hit 1500% now.. I'm gonna run a few multiple bots now to see if i can raise it beyond the anticipated 2000%



Edited 2 time(s). Last edit at 04/22/2008 06:11PM by rohanpinto.

Options: ReplyQuote
Pages: 12Next
Current Page: 1 of 2


Sorry, only registered users may post in this forum.