tutorial

Plz Visit
www.etiole.com

*********This was originally taken from mgoos.com/blog and developed by manish arora (thnx!)*********

**********notice********* All links towards mgoos dont work . ******************

Think about a pipeline on Internet which is carrying millions of dollars and you just need to request for a free connection from that pipeline and start making money. Sounds exciting to you… me too!!!

You might be thinking that what the heck this person is talking about, well but it’s true. Within 7 days you can be able to exploit world’s biggest online Ad provider’s advertisement model. Yes you are right… it’s Google AdSense (To know more about AdSense and PPC model read my blog post at http://mgoos.com/extra/blogs/ppc-cracked.htm).

Exploitation of Google’s AdSense is three step process, yes it is true!

1). Open an account with Google AdSense, whether you have a website or not (Its true!).

2). After Confirmation of account opening get an ad unit from wizard.

3). In Ad Unit you will find a pub-id (publisher ID), place that to my click simulation JavaScript code.

And here you are… you will start getting money at the speed of Indian taxi meter!!!

Now let’s go step by step with screenshot of whatever I said.

Open an account with Google AdSense, whether you have a website or not !!!

We people usually search for many things on Google or Yahoo’s search engine, have you ever thought that search result URLs are of very much importance here, well believe me it is!

How I did it? Very simple, I searched for blogs in Google and randomly I have picked one blog’s URL to register. See the screenshots of account opening process with Google AdSense.

1). http://www.mgoos.com/extra/cracked/01.jpg

2). http://www.mgoos.com/extra/cracked/02.jpg

3). http://www.mgoos.com/extra/cracked/03.jpg

4). http://www.mgoos.com/extra/cracked/04.jpg

5). http://www.mgoos.com/extra/cracked/05.jpg

6). http://www.mgoos.com/extra/cracked/06.jpg

7). http://www.mgoos.com/extra/cracked/07.jpg

8). http://www.mgoos.com/extra/cracked/08.jpg

9). http://www.mgoos.com/extra/cracked/09.jpg

You can see how easy it is to open an account with AdSense. Ok now move with next step…

After Confirmation of account opening get an ad unit from wizard

Well it is important part and very easy 5 step process.

1). http://www.mgoos.com/extra/cracked/10.jpg

2). http://www.mgoos.com/extra/cracked/11.jpg

3). http://www.mgoos.com/extra/cracked/12.jpg

4). http://www.mgoos.com/extra/cracked/13.jpg

5). http://www.mgoos.com/extra/cracked/14.jpg

So now you have the ad unit code. In this ad unit code you can see a publisher ID (pub-XXXXXXXXXXXXXXXX). This ID is used by Google to uniquely identify a publisher and is the key to generate money.

Place pub-id to my click simulation JavaScript code

Let’s start with basics, first of all we will analyze Google’s ad generator code. You can download original ad generator javascript from http://pagead2.googlesyndication.com/pagead/show_ads.js.

I have modified it for better understanding which you can download from http://www.mgoos.com/extra/cracked/modified_show_ads.js.txt

In modified code you will see a function at line number 73 named, function G(b,a,d) { … }. Google uses this function to generate ads. This function creates an IFRAME element in the page and Google set’s the source of this page to a dynamically prepared URL from client’s browser and screen setting.

http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-1111222233334444&dt=1185613795556&lmt=1185613394&format=728×90_as&output=html&url=http%3A%2F%2F%25www.mysite.com%2Findex.php&ad_type=text&cc=140&u_h=1024&u_w=1280&u_ah=934&u_aw=1280&u_cd=32&u_tz=330&u_java=true

Ok let’s analyze this URL step by step,

Ad Page URL : http://pagead2.googlesyndication.com/pagead/ads

Query Parameters:

client=ca-pub-1111222233334444

dt=1185613795556

lmt=1185613394

format=728×90_as

output=html

url=http%3A%2F%2F%www.mysite.com%2Findex.php

ad_type=text

cc=140

u_h=1024

u_w=1280

u_ah=934

u_aw=1280

u_cd=32&u_tz=330

u_java=true

the source URL of IFRAME includes all above (more or less) parameters. The client parameter identifies unique client, dt is date time, lmt is last modified time of the page, format is ad format etc. You can know meaning of each parameter from line 236 in my modified_show_ads.js.

So this whole URL says that “I am a HTML page from http://www.mysite.com/index.php opened in a browser window, available screen dimensions are 1280×934 and JavaScript is enabled in the browser… Give me a advertise page”. Now when Google confirms the publisher ID and other parameters it gives you an HTML page having ad links and description about ad (precisely Ad Unit).

All these ad links are came from other then your domain i.e. googlesyndication.com. Here Google is protecting there ads from sniffing or spoofing with browser’s security feature of not allowing cross domain scripting. If we can access links in Google’s IFRAME then we can traverse ad links programmatically and can make money. That’s it… we got the key of making money!!!

But how it’s possible??? Very simple prepare and execute this URL on your web server and send the resultant HTML page which has Ad links to the client. In this case you can break the limit of cross domain scripting and earn thousands of dollars.

Thinking I am saying lie… no, not at all see my account’s screenshot http://www.mgoos.com/extra/screenshot.jpg

Need more proof… okay here you are, pics of a Digital photo frame cum mp3/mp4 player from Google which they sent me as X-Mas gift…

1). http://www.mgoos.com/extra/cracked/15.jpg

2). http://www.mgoos.com/extra/cracked/16.jpg

3). http://www.mgoos.com/extra/cracked/17.jpg

courtesty of Manish arora