WebStatsSpammer

Please do not use this. It’s just a proof of concept.

This tool lets you spam website statistics with forged referrers. Currently you can send a HTTP request to a specified site and set the referrer to:

  • a custom address
  • the Google website with a specified search string

This way the request will generate an entry in the referrer or keyphrase listing in the statistics tool on the target site.

You can download the Eclipse project as tar or zip; make sure the Maven plugin is installed. Have a look at the source code.

The compiled JAR file can be downloaded here.

How to spam statistics

Spamming website statistics with a forged referrer is as easy as this: you either set a custom referrer or use the shortcut for a referrer from a Google search.

Custom referrer

If you want to send a custom referrer to some site use this command line:

java -jar web-stats-spammer-1.0.jar referrer \
   http://target.example.com http://yoursite.example.com

This will send a request to http://target.example.com with the referrer set to http://yoursite.example.com.

Google search terms

The tool provides a shortcut for a referrer from a Google search. So, if you want to generate a request with such a referrer use this command line:

java -jar web-stats-spammer-1.0.jar google-search \
   http://target.example.com test1 test2 test3

This will generate a request for http://target.example.com with the referrer set to this.

Conclusion

It’s very easy to generate requests with a custom referrer. This makes it a snap to spam the statistics of websites.