Tracking pixel

2015-07-26 21:00:00
Posted in: Security Fun
Views: 765

running code using different extensions


using a simple .hcaccess file it's possible run (php) code using a different file extension like .jpg
This can be used creating tracking pixels since
- example htaccess:

    RewriteEngine On
    RewriteBase /

    RewriteRule pixel.jpg /pixel/pixel.php


example pixel.php:

//draw a pixel
header('Content-Type: image/png');
echo base64_decode('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABAQMAAAAl21bKAAAAA1BMVEUAAACnej3aAAAAAXRSTlMAQObYZgAAAApJREFUCNdjYAAAAAIAAeIhvDMAAAAASUVORK5CYII=');



?>

Done you now have a pixel running php code.

why-guy add:

Last Tweets: