Using Google to search for compromised pages
Google search is powerful, so powerful at finding important information it can also be used to find exploited information. By exploited information I mean pages that have been used to increase the page rank of advertisements by attaching their links to a high page ranked domain.
Its easy to search just your site for commonly used spam terms, for example:
viagra site:yourdomain.com
Would show results like this:
As long as your site is not actively selling viagra you could potentially get a list of all the pages that a spam bot has exploited to mention and or link to viagra content.
This is extremely helpful at a university since all sites fall under one main domain and there could potentially be hundreds of Web site administrators across campus with their own sites on their own servers and various methods to creating those sites.
Any form left on the Web for too long without the proper “human” checks in place before content is published could potentially be exploited. It is a never ending battle, the more interactivity the web gets the more chance a bot can exploit that interactivity for its own use.
