![\"Do](\"https:\/\/web.archive.org\/web\/20120930112730im_\/https:\/\/explicitly.me\/wp-content\/uploads\/2011\/04\/jailtime.jpg\" "\\"Do")
<\/p>\nDo This and Face Some Jailtime (source http:\/\/www.flickr.com\/photos\/morganmorgan)<\/p>\n<\/div>\n
NOTE:\u00a0<\/strong>This idea is theoretical, and I HAVE NOT actually developed it any further than having a conversation with a few people, including\u00a0Joost de Valk<\/a>, regarding the possibility. All my research indicates, and Yoast confirms it, that it is indeed possible to create something this devilish. \u00a0There are other versions, of this idea floating around, which I will cover as well.<\/p>\n Side Note<\/strong>:\u00a0This is HIGHLY Illegal. Don\u2019t freaking do it. \u00a0In fact I am doing blackhat a disservice, this is downright Exploit and Hacking.<\/p>\n While back Yoast warned about a really dodgy SEO plugin being pimped out called\u00a0Blogpress SEO Plugin<\/a>. He found that amongst other devious things:<\/p>\n Next to that, the plugin is kind of enough to add a link back to itself on your blog\u2019s homepage, in a hidden div of course, because that\u2019s how smart people roll, right? Luckily, that makes it even easier for Google to find all the sites running the plugin and ban them all in one big sweep.<\/p><\/blockquote>\n That is the level of control that you could unleash when you install a third party plug-in to your site.<\/p>\n There are a few things to remember:<\/p>\n <\/p>\n Link To Me! (source http:\/\/www.flickr.com\/photos\/hoyvinmayvin\/4116728906\/)<\/p>\n<\/div>\n So I questioned myself on what I wanted to do. Here I am talking to myself:<\/p>\n Note:<\/strong>\u00a0I have intentionally added a massive flaw to this methodology to trip up people who do ass hat SEO. Learn all search engine directives, what they were meant to do, and what they are capable off. I refuse to elaborate anymore, except that the method I am highlighting is very limited in its effect if you haven\u2019t got a clue what I am talking about in this note.<\/p>\n If I can create a WordPress Plugin that is really popular, and gets installed on thousands of sites, then by simply inserting a backend piece of code, I can control anything on their site.<\/p>\n Easy. Run PPC Ads. Get it ranking in SEO. Pay people to install it, pay bloggers to review it. Make it a really cool plug-in.<\/p>\n Run a search of the WordPress Plugin Directory. Find old plugins no longer updated. \u00a0Select those that have high installs. Offer to buy from original Author. Boom.<\/p>\n <\/p>\n WordPress Security Flaw Plugin Dashboard<\/p>\n<\/div>\n So above is my theoretical tool management centre. \u00a0What does it do?<\/p>\n The result could be devastation on all the poor unsuspecting blog owners, or may not even register on their radar! All you are doing is manipulating their tag pages\u2026 If you rel Canon them, most blog owners won\u2019t even know anything is wrong except they may lose traffic to their tag pages from the SERPs.<\/p>\n Unlike ordinary category and actual post pages, I have found that these are the least monitored WP pages. Also, for people who love tagging, you can end up with hundreds of variations, hence more pages per site. And apart from those people who have either decent SEO knowledge, or a decent SEO Plugin, tag pages are often left open to search engines.<\/p>\n However this exploit can be used for any part of the site, including actual post page as well as the site home!<\/p>\n Security Flaw – Everyone Has One.<\/p>\n<\/div>\n Is this a flaw? Yes. Can it happen to you? Yes.<\/p>\n WordPress or at least people passionate about it need to find a way to work on verification of plugins and maybe create a \u201cTrust Worthy\u201d verification for plugin release. \u00a0Till then, I will rely on my network of people such as Yoast, or freelancer\u00a0WP Plug-in devs<\/a>\u00a0or my\u00a0Birmingham based Development team<\/a>\u00a0who I have worked with for years to test and check anything I install on my sites.<\/p>\n <\/p>\n WordPress Condom – Source: http:\/\/www.flickr.com\/photos\/nbachiyski\/1463351154\/<\/p>\n<\/div>\n Don\u2019t install any old crap you find on the internet.\u00a0 Check it. If you suspect a dodgy plugin,\u00a0contact Yoast who will run a\u00a0WordPress Plugin Review<\/a><\/strong>.<\/p>\n There are many\u00a0exploits for sites, see this article for instance<\/a>\u00a0(by\u00a0Kristine Schachinger<\/a>).<\/p>\n","protected":false},"excerpt":{"rendered":" Part of understanding Blackhat and Hacker Spam is to put yourself it their mindset. And that means asking \u201cHow Can I Use This For My Benefit?\u201d Well I have been doing a lot of that lately. And one of the genius ideas that I had was full site takeovers. Then I toned it down. And […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"_links":{"self":[{"href":"https:\/\/explicitly.me\/wp-json\/wp\/v2\/posts\/84"}],"collection":[{"href":"https:\/\/explicitly.me\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/explicitly.me\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/explicitly.me\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/explicitly.me\/wp-json\/wp\/v2\/comments?post=84"}],"version-history":[{"count":4,"href":"https:\/\/explicitly.me\/wp-json\/wp\/v2\/posts\/84\/revisions"}],"predecessor-version":[{"id":88,"href":"https:\/\/explicitly.me\/wp-json\/wp\/v2\/posts\/84\/revisions\/88"}],"wp:attachment":[{"href":"https:\/\/explicitly.me\/wp-json\/wp\/v2\/media?parent=84"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/explicitly.me\/wp-json\/wp\/v2\/categories?post=84"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/explicitly.me\/wp-json\/wp\/v2\/tags?post=84"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<\/h3>\n
<\/h3>\n
\n
<\/h3>\n
![\"Link](\"https:\/\/web.archive.org\/web\/20120930112730im_\/https:\/\/explicitly.me\/wp-content\/uploads\/2011\/04\/link-to-mejpg.jpg\" "\\"Link")
<\/p>\n\n
<\/h3>\n
<\/h4>\n
<\/h4>\n
<\/h4>\n
![\"Wordpress](\"https:\/\/web.archive.org\/web\/20120930112730im_\/https:\/\/explicitly.me\/wp-content\/uploads\/2011\/04\/Plugin-Ant.jpg\" "\\"Wordpress")
<\/a><\/p>\n\n
![\":)\"](\"https:\/\/web.archive.org\/web\/20120930112730im_\/https:\/\/explicitly.me\/wp-includes\/images\/smilies\/icon_smile.gif\"){kind=icon}
<\/li>\n<\/ul>\n<\/h3>\n
<\/h3>\n
![\"Security](\"https:\/\/web.archive.org\/web\/20120930112730im_\/https:\/\/explicitly.me\/wp-content\/uploads\/2011\/04\/Security-Flaw.jpg\" "\\"Security")
<\/a><\/p>\n<\/h3>\n
\n
<\/h3>\n
![\"Wordpress](\"https:\/\/web.archive.org\/web\/20120930112730im_\/https:\/\/explicitly.me\/wp-content\/uploads\/2011\/04\/Wordpress-Condom.jpg\" "\\"Wordpress")
<\/p>\n