Sniffing stumbleupon

The stumbleupon toolbar uses http to get a list of sites to stumble to. Here is a sample response from the stumbleupon server. I used ethereal 0.10.14 on windows xp sp2 to capture the packts.

1. Identify the stumbleupon server by capturing the packet with the /recommend.php request. Add the following ethereal filter, then hit the stumble button.

http contains "/recommend.php"

2. Use the destination address from the previous packet and use that as a filter to capture the packets from the transaction.

http and ip.addr == 69.36.233.10

Here is a sample response from the stumbleupon server.

NOSPONSOR
FRIEND sameasitev
FIRSTFRIEND sameasitev
NICK qicboy
URL http://fazed.org/video?id=525 129   1841201 edstate EN 0 9062053  3 30
URL http://skeletonproject.com/2006/11/28/10-movies-the-us-government-would-prefer-people-not-watch/ 255   1973444 hernannadal EN 0 8988816  3 30
URL http://www.ninjagalleries.com/galleries/hfs/pics/sasha/images/image016.jpg 6 http://www.ninjagalleries.com/galleries/hfs/pics/sasha/images/image016.jpg  881036 weejules EN 0 8396679  0 21
URL http://www.josephrowell.com/ 441   961583 sophieconnor EN 0 9106392  1 37
URL http://hel-looks.com/?p=image/archives/4/20060929_02/ 86   1773843 zizzent EN 0 9109074  0 36
URL http://www.acronymdictionary.co.uk/acronymae.html 271   604838 blee1607 EN 0 5226284  1 21

Add a comment

Posted by QICBoy on December 6, 2006 4:20:00 PM PST #