Redirect Scan

by StankDawg  (

If you visit (which you may do, as it is the default home page in a lot of circumstances) you may notice that the page may be customized based on your settings.

  For example, a Dell system sometimes defaults to the homepage: DellNet by MSN which uses a custom module in the MSN system to deliver Dell information.  I found this both annoying, but at the same time, interesting.

After a little reverse engineering, I discovered that you can either go to these sites directly, or you can be redirected to these sites from: by using the proper URL parameters.  It turns out that it redirects to a specific page customized to a specific company or group based on the parameters passed via the URL.

For example, not only can you type in the direct DellNet address listed above, but you can also use the redirected address listed below to get to the same place.  I decided to hammer through some patterns and see what other sites offer custom services.

The results are listed below:

URL                          Company/Site  Microsoft - IE5.5 SP1 download (redirects to an apology page)  Dell  Dell - "ebar" (error page, apparently this no longer exists)  Microsoft - Hotmail  Dell  Dell  MSN - MSN Member  MSN - Canadian version  MSN - My MSN (customized page)  Best Buy  Charter Communications - Broadband ISP Home page  Dell  Disney  Best Buy Charter Communications - Broadband ISP Home page Dell Disney MSN - MSN Member Qwest Staples Verizon Qwest Staples United Airlines Verizon  Verizon - Direct link to MSN Groups  Verizon - Direct link to MSN Shopping  Verizon - Direct link to MSN Money Central  Verizon - Direct link to My MSN (customized page) 

This was done manually during a training session, where I sat in the back of the class unchallenged and bored to tears.

I only went through some limited ranges in my testing.  It could easily be scripted to check for a larger series of numbers.  A couple of them seemed interesting, such as the "ebar" page.

Maybe there are some other software download pages that could be interesting.  Maybe there are ways to login or access customized systems that weren't intended for public consumption.  Just think of how many other sites may be out there on the web that may work the same way.  See what others you can find!

Return to $2600 Index