mozdev.org

If you do not get a response to a question posted in this forum, please try sending a message to the project's mailing list or to the project owner directly.

[1] Submitted by: ebricca (author) on Tuesday 28th March 2006 at 08:52 -0500

.. cleaned up the forum page .. for old entrys see above .. feel free to post ;)
upcoming version 0.8 .. will need some beta testers to be sure that that convert finally works for all -- look at the main (Home) page

if you want to post a url remember to format it like this one (else the url will be cut out):
h t t p : / / mydomain.org / path / path / file.js

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

[2] Submitted by: ebricca (author) on Wednesday 29th March 2006 at 04:40 -0500

uploaded the refspoof-0.8beta.zip file to the downloads directory .. it will take some time till the it's synchronised to all mirrors it should be available to all on friday the 31 mars

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

[3] Submitted by: Kenny on Tuesday 4th April 2006 at 17:59 -0400

Hi, I'm running Refspoof 0.7 with Firefox 1.5.0.1 (latest version as of 04/04/2006), and while most of the functionality works fine, the "spoofmark" button doesn't. Clicking it with a valid URL in the URL bar and spoof URL in the spoof bar brings up the "Add Bookmark" dialog, but the "name" field contains "undefined" instead of the spoof:// pseudoURL. The Javascript console doesn't contain anything unusual.
Any ideas?

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

[4] Submitted by: ebricca (author) on Wednesday 5th April 2006 at 17:58 -0400

yes .. this is corrected in the new coming version 0.8 ..

try the available beta ;) .. and send a mail (refspoof at gmail dot com) how it worked (only got one feedback mail so far)

.. the code for the dialog box had to be changed (variables are passed differently to the .openDialog method) ..

Mozilla/5.0 (Macintosh; U; PPC Mac OS X; de-de) AppleWebKit/417.9 (KHTML, like Gecko) Safari/417.8

[5] Submitted by: js on Saturday 8th April 2006 at 03:40 -0400

hello friends, i am new user . I just knew about refspoof. But please teach me how to install in forefox on windows xp? i eagerly waiting for your answer.
my email id: infoallabout@gmail.com
thank u...

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

[6] Submitted by: ebricca (author) on Saturday 8th April 2006 at 15:35 -0400

open/extract the downloaded refspoof-0.8beta.zip with winzip (or something different .. think winxp supports .zip on its own though not 100% sure)

drag the extracted .xpi file in a firefox window .. install dialog should appear :)

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

[7] Submitted by: ebricca(author) on Wednesday 12th April 2006 at 12:29 -0400

only got 3 feedback emails on refspoof0.8 beta ..
hmm .. 2nd told that all went well on windows xp the convert too :)

so send me some feedback .. :/

;)

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

[8] Submitted by: David Ogletree on Friday 14th April 2006 at 02:56 -0400

I installed this on firefox 1.5.0.1 and it does not work. The only way I can get it to work is if I put the url and ref are the same. I can only spoff my url on my site.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

[9] Submitted by: ebricca (author) on Monday 17th April 2006 at 16:51 -0400

@david .. did you try it with a new profile .. if not please read through the faq.

have no clue why it didnt work from your description atleast i know that you might have used win nt5 - where other extensionsions installed as there might be a namespace clash. please read also through the integrated help. the sentences that "The only way I can get it to work is if I put the url and ref are the same. I can only spoff my url on my site." are not all that clear imho. did you use the gui or entered the spoof uri directly into the address bar?

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

[10] Submitted by: french user on Sunday 23rd April 2006 at 06:09 -0400

Hello, I am french like BoyD, new on Firefox and I really don t understand where to install this new beta version after extracting it from Winrar. You say 'drag the extracted .xpi file in a firefox window': what is a firefox window? do we have to extract the zip files in C:/Program Files/Mozilla Firefox, or in some underfiles from Mozilla like Extensions, Components, etc?

Salut BoyD : kesk'on fait quand on a extrait le fichier redspoof 0.8 Beta? on doit l'extraire dans le Program Files de Mozilla? je comprends pas ce qu'il faut faire avec le fichier .xpi. Si tu peux m'aider (j'utilisais SuperMegaSpoof avec IE mais j'ai décidé de passer à Firefox : c'est bien compliqué de trouver des programmes spoof avec Firefox)

Merci de ton aide et pour tout le travail que vous faites sur ce petit programme bien utile

A +

Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2

[11] Submitted by: ebricca (author) on Sunday 23rd April 2006 at 10:16 -0400

extract the zip file to any dir .. only the included .xpi matters .. drag the .xpi file onto an opened ffx window (where you normally enter your urls :) ) an install dialog should appear .. boyd very rarely takes a look at this notes board -- well i neither have trouble to understand some french ;)

well and about the supermegaspoof .. thinking about coding a client for ffx ;) though its just in the thought/would be nice state .. for now

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2

[12] Submitted by: ebricca (author) on Sunday 23rd April 2006 at 10:20 -0400

reason why i didnt release the thing as final yet is that my powerbook once again broke down :(( .. damn harddrive have to get a warrenty replacement and that takes time once again .. though i have a backup copy of the drive so no problm ..

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2

[13] Submitted by: french user on Monday 24th April 2006 at 10:45 -0400

Merci pour la réponse! This time I understood where to put the xpi file : Thanks again...

Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2

[14] Submitted by: retro on Tuesday 25th April 2006 at 05:21 -0400

Please. Any information in spanish?
Thanks....

Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2

[15] Submitted by: ernesto (author) on Tuesday 25th April 2006 at 16:19 -0400

hmm .. well i dont speak spanish that well (only simple phrases thus far) .. so no luck on this side .. though i think google translate should give you workable results

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2

[16] Submitted by: Awake on Tuesday 2nd May 2006 at 16:13 -0400

Hi! I installed the plug-in but now I don`t know what to do. How can I spoof a site???

Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2

[17] Submitted by: ebricca on Sunday 7th May 2006 at 02:27 -0400

@Awake read the included help .. read the faq on this site

Mozilla/5.0 (Macintosh; U; PPC Mac OS X; de-de) AppleWebKit/412 (KHTML, like Gecko) Safari/412

[18] Submitted by: rouge on Wednesday 10th May 2006 at 05:16 -0400

Hi,
refspoof is a cool tool, and i use it to do pentests. But it seems impossible to use it to send some php code (like < ? phpinfo(); ? > ) or some javascript ( < script > alert ("XSS") < / script >)... so i still use wget and curl for this. It would be so cool if you could add these functionnalities.

Opera/8.51 (Windows NT 5.1; U; en)

[19] Submitted by: rouge on Wednesday 10th May 2006 at 05:18 -0400

just a little test... delete this comment. As you can see, i use User Agent extension too

<script>alert("i use the User Agent extension too")</script>

[20] Submitted by: ebricca on Wednesday 10th May 2006 at 12:44 -0400

rouge .. send me an email (refspoof at gmail) as i dont get exactly what you mean ..

are you trying to use the "post" instead of the "get" server access method ? (data element in curl)

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

[21] Submitted by: refspoofer man on Thursday 18th May 2006 at 14:47 -0400

A bookmarklet for you fiends, this turns http links into spoofs.. Note this is a modification on the linkify bookmarklet.

javascript:(function(){var D=document; D.body.normalize(); F(D.body); function F(n){var u,A,M,spf,ref,R,c,x; if(n.nodeType==3){ u=n.data.search(/https?\:\/\/[^\s]*[^.,;'%22>\s\)\]]/); if(u>=0) { M=n.splitText(u); R=M.splitText(RegExp.lastMatch.length); A=document.createElement(%22A%22); spf = M.data; ref = M.data; spf = spf.replace('http','spoof'); ref = ref.replace('http','ref'); A.href= spf + ';' + ref ; A.appendChild(M); R.parentNode.insertBefore(A,R); } }else if(n.tagName!=%22STYLE%22 && n.tagName!=%22SCRIPT%22 && n.tagName!=%22A%22)for(c=0;x=n.childNodes[c];++c)F(x); } })();

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7

[22] Submitted by: sxfrk on Monday 22nd May 2006 at 15:36 -0400

This will link any three words to a large image search on google

javascript:(function(){var D=document; D.body.normalize(); F(D.body); function F(n){var u,A,M,R,c,x; if(n.nodeType==3){ u=n.data.search(/[^ ]+ [^ ]+ [^ ]+/); if(u>=0) { M=n.splitText(u); R=M.splitText(RegExp.lastMatch.length); A=document.createElement("A"); A.href=" + M.data; A.appendChild(M); R.parentNode.insertBefore(A,R); } }else if(n.tagName!="STYLE" && n.tagName!="SCRIPT" && n.tagName!="A")for(c=0;x=n.childNodes[c];++c)F(x); } })();

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7

[23] Submitted by: ebricca (author) on Monday 22nd May 2006 at 17:34 -0400

so then i'll add the bookmarklets to the refspoof helppage .. (though i dont yet get the purpose of the 2nd one from sxfrk think the google url got cut out due to the board's contained url filter) i'll add please send me a copy of such posts/scripts to my gmail account ;)

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

[24] Submitted by: Man on Wednesday 24th May 2006 at 04:46 -0400

Is it possible to spoof ALL links in pages automatically when I surf in internet?

Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

[25] Submitted by: ebricca (author) on Sunday 28th May 2006 at 08:11 -0400

yep in the beta0.8 (r button static) or use the http header extension to set a static referrer

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; de; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

[26] Submitted by: test on Tuesday 30th May 2006 at 16:23 -0400

test

<?phpinfo();?>

[27] Submitted by: Teo on Friday 2nd June 2006 at 12:49 -0400

"Firefox does not know how to open this address because the protocol (spoof) is not associated with any program. v7.9 and .70 ... any suggestions?

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.3) Gecko/20060326 Firefox/1.5.0.3 (Debian-1.5.dfsg+1.5.0.3-2)

[28] Submitted by: j4m on Saturday 17th June 2006 at 20:04 -0400

same problem

Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

[29] Submitted by: rebel on Sunday 3rd December 2006 at 10:33 -0800

great work, been using it for a while, but one thing, how about a 2.0 compatible version? thx in advance

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0

[30] Submitted by: eric on Tuesday 12th December 2006 at 01:27 -0800

Whit the old version I got no problem to get it work but with this one i can t? What should be put in wich filed . For example I want to access frienddomain.com with referer mydomain.dom
I put in the normal address bar and aside "spoof:" but it see Referer : N/A when i go to frienddomain.com I try as well with "ref://mydomain.dom" aside ""spoof:" I go the same result . What I making wrong ?

Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.1) Gecko/20061010 Firefox/2.0

[31] Submitted by: Pete on Tuesday 12th December 2006 at 05:02 -0800

I have 0.8.5 working with FF 2.0. Except for one site:
spoof://auth.redclouds.com/proadult/;ref://www.proadult.com/members/home.html
If I open this, I get to the entry portal, but clicking any of the servers will give an error.
Works with 0.8.5 in FF 1.5.0.8, but I would like to use FF 2.0. Can others confirm this problem? Solution?

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.0.8) Gecko/20061025 Firefox/1.5.0.8

[32] Submitted by: #rulz on Sunday 17th December 2006 at 20:23 -0800

yo!... the version 8.5 works in ff 2.0, but it display no pics when i spoof an site...
help :D

Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.8.1) Gecko/20061010 Firefox/2.0

[33] Submitted by: Bman on Thursday 21st December 2006 at 17:44 -0800

Same issue as the guys above. FF1.5 no dramas with the old refspoof but FF2.0 and the new one no go. The links don't work correctly and the pics don't load.

Some help would be nice.

Cheers,
B

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0

[34] Submitted by: Cryont on Tuesday 2nd January 2007 at 07:11 -0800

Same issue as above :( (links don't work correctly and the pics don't load)

Mozilla/5.0 (Windows; U; Windows NT 5.1; cs; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1

[35] Submitted by: Wow on Tuesday 9th January 2007 at 15:46 -0800

Wow,

It's true what they say about CS nerds... You have NO idea how to make it user friendly...

WTF?

Why take the time to make a spoofer, but completely neglect to make an easy to understand step by step instructions that actually work???

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1

[36] Submitted by: ruicp on Thursday 18th January 2007 at 12:23 -0800

Hi!
I've been using refspoof for some time and finally I installed on my brand new FF 2.0.1 browser.
Unfortunately, every time I open a page it appears a notice (below the tabs) with some info and a button Help (U). I've tried every combination of options to take this out w/ success - the only way is to disable referrer.

Help!

(Thanks!)

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1

[37] Submitted by: r00m23 on Tuesday 20th March 2007 at 20:41 -0700

Could you add a feature to spoof the current page url? Thier is a java applet for a chat room that I want to load from my computer(rather than using the provided webpage witch has a lot of ads and other restrictions.) At first I thought the applet checked my referrer(the need for your current prog.) but it turns it that it acully checks the page it is on, its own URL. Could you implment a feature to spoof the current URL. Im not sure if any one else would see use in a feature like this, nor do I know how hard such a thing is to implement, but it would be a cool addition. In the mean time, Ill be looking for other ways to do what I needed. Thanks,, - r00m23.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2

[38] Submitted by: greasy on Thursday 5th April 2007 at 19:05 -0700

Hi all. I've been struggling for hours on end. I'm using greasemonkey with refspoof. Inside my code I want a simpe line like:
window.location.href =
and it won't work? Any suggestions would be greatly appreciated!

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

[39] Submitted by: greasy on Thursday 5th April 2007 at 19:06 -0700

It seems the message came out wrong I meant this:

window.location.href=

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

[40] Submitted by: greasy on Thursday 5th April 2007 at 19:08 -0700

hope this come out after the =

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

[41] Submitted by: greasy on Thursday 5th April 2007 at 19:10 -0700

((((

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

[42] Submitted by: besilent on Friday 6th April 2007 at 13:15 -0700

In the nsSpoofProtocolHandler.js why is there a line with "javascript:besilent" that generates a error?

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

[43] Submitted by: Orclev on Wednesday 6th February 2008 at 09:48 -0800

I'm trying to spoof a submission to a https URL but there doesn't seem to be a way to do that using the spoof://;ref:// syntax. I can set a static referrer and use that, but then I can't use the bookmarking feature of refspoof. When I click the spoofmark button it generates a bookmark and sets the spoof: value to something like spoof:// but clicking the link tries to direct me to which is most definitely not what I want to do. Is there some way to make this work with https? Maybe a spoofs:// handler for redirecting to https URLs (and a refs: for https referer)?

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11

[44] Submitted by: Orclev on Wednesday 6th February 2008 at 09:49 -0800

FYI, the comment system on here ate all the URLs I had in my previous post.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11

[45] Submitted by: MEG on Sunday 23rd March 2008 at 19:16 -0700

The history of spoofs file doesn't seem to add any (nor obviously does it display any). Ideas?

Is there a way to default the spoof to be Static?

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12