http referrer

fakie_flip · 12-13-2007, 01:56 PM

Does Linux have any software that can spoof the http referrer to a web server? Does it work with wget or in a script? My script can't access a web page without spoofing the referrer.

http://en.wikipedia.org/wiki/Referer_spoofing

acid_kewpie · 12-13-2007, 02:48 PM

sure, curl and wget can add referrer headers in directly, just check the manpage.

forrestt · 12-13-2007, 03:47 PM

You can do it w/ Firefox:

http://livehttpheaders.mozdev.org/

HTH

Forrest

fakie_flip · 12-13-2007, 06:36 PM

Quote:

Originally Posted by forrestt

You can do it w/ Firefox:

http://livehttpheaders.mozdev.org/

HTH

Forrest

Thanks for the suggestion, but I need to do it from a script. How can I know what referrer is being sent to a server when I click on a link?

forrestt · 12-13-2007, 10:15 PM

Sorry, didn't see where you needed to do it from a script (old eyes I guess). Try wget as acid_kewpie suggested.

Forrest

fakie_flip · 12-13-2007, 10:34 PM

How can I know what the http referrer is being sent to the server that I should use with wget?

acid_kewpie · 12-14-2007, 02:42 AM

just a -v for verbose info. again, all in the manpage...

nx5000 · 12-14-2007, 05:53 AM

Quote:

How can I know what the http referrer is being sent to the server that I should use with wget?

With livehttpheaders (great stuff), you look what firefox does.
Then you do it in your script with curl/wget modifying the referer value

fakie_flip · 12-15-2007, 03:34 PM

Quote:

Originally Posted by nx5000

With livehttpheaders (great stuff), you look what firefox does.
Then you do it in your script with curl/wget modifying the referer value

Why is livehttpheaders great stuff, and how can I use it to get the http referrer? I have it installed. The capture box is checked, but nothing appears to be capture. The window is blank.

fakie_flip · 12-15-2007, 03:36 PM

Quote:

Originally Posted by acid_kewpie

just a -v for verbose info. again, all in the manpage...

I cannot download the website with wget or curl, so why would -v do me any good?

acid_kewpie · 12-15-2007, 03:37 PM

sorry, misread that. yeah liveheaders, or i'd just tcpdump /wireshark the traffic as it leaves the box.

fakie_flip · 12-15-2007, 03:42 PM

Quote:

Originally Posted by acid_kewpie

sorry, misread that. yeah liveheaders, or i'd just tcpdump /wireshark the traffic as it leaves the box.

How can I use liveheaders to get the http referrer? I have it installed. The capture box is checked, but nothing appears to be capture. The window is blank.

acid_kewpie · 12-15-2007, 03:55 PM

works for me without touching a thing...

fakie_flip · 12-16-2007, 01:04 PM

Quote:

Originally Posted by acid_kewpie

works for me without touching a thing...

Okay, I'll reinstall it and try it in Firefox 3.

acid_kewpie · 12-16-2007, 01:09 PM

well i'm on 2.0.0.10 at the mo... might want to just try tcpdump too... run "tcpdump -X port 80 -s0" to dump the http traffic in hex. certainly not as readable, very quick quick and simple though.