Hacking StatCounter
Posted in security, hacking | by evilbitz |There is a web service which is called StatCounter, it gives it’s users a free log of their website’s statistics.
The problem is that the log size is limited to the last 100 visitors. StatCounter collects statistics by running javascript in the visitor’s browser. When you open an account at StatCounter, they giv you e a piece of javascript to put at the footer of your website, this javascripts collects the interesting information from the visitor’s browser and sends it to StatCounter for logging.
Bypassing the 100 limitation is kind of easy, because you can open multiple projects (each is limited seperately) for the same website. now, If you’ll open 10 projects, you’ll get 10 pieces of javascript. You should put a different JS for different visitors, anytime a new visitor comes (you should rotate the JS), the problem is that you’ll want to put the same visitor in the same StatCounter project, so you’ll have to maintain a table that translates IPs to the correct pieces of JS. My estimation is that it takes something like 20 minutes to setup such a thing with PHP/MySQL.
