Home > Paid Traffic Sources > POP / PPV / Redirect

---

AdwareROI platform + SSL Injection (20)

---

Update to STM readers. We are working on adding SSL injection to our platform. This means you can inject on google, facebook, yahoo, etc. POC is almost ready and then we will integrate it into the main platform. Any inquiries you can send to info@adwareroi.com

Thanks

---

Can you please explain more in depth on how this works? Thanks!

---

Well I don't want to get too much into it, but it involves a MITM and ssl certificates. The AdwareROI platform works on the network level so browser updates should not affect its performance.

---

As I understand this post - we will be able to replace google, FB, others advertisement spots with 'our' advertisement if user that browses the site have Adware installed on commuter from your network?

---

Yikes.

---

Yikes Indeed!

Good luck with the hefty fraud charges when they come.

---

If you can inject into SSL-secured sites, what's to stop you or a rogue employee using this to key-log passwords and user data on the websites of banks, merchants, etc.?

I'd be very careful with this kind of stuff... seems like, at least at the technology level, it's the kind of thing that if misused could get you in some pretty hot water with your name/company clearly labeled all over it.

---

this makes banking trojans look like puppies

---

pretty much. We sell the platform and its up to the user to not do bad things. You will sign a contract with us that we are not liable for what you do with it. Any browser add on can do this as far as I know. So the security issue is there with anything. Its up the user to remove it as its not a hidden app from their control panel.

---

Its compiled to the customers domain, etc.. Its their own software.

---

Does that then mean they could decompile and/or edit the software to use it for such nefarious purposes?

---

no its compiled code.

---

Can you please show us a video demo of this in action, and being uninstallable by the user?

---

It's a regular EXE uninstall

---

Contact me on skype to discuss.

---

Is this similar to LilyJade?

http://lmgtfy.com/?q=lilyjade+ad+injection

---

Not even close. Lilyjade was a browser extension, not sure if they still exist even.

AdwareROI is network level. Browsers can update, change, etc. it will still work. Plus your extension wont get pulled when you violate some google policy eventually.

---

I'm still a bit confused.

How is the customer's domain relevant if the adware is injecting code when browsing on completely separate sites? It may be injecting ads pulled from the customers domain, or pulling code from their domain, but that's beside the point.

If you allow ad injection over the top of FB/Google ads you are basically publicly facilitating (and selling...) ad fraud on the largest advertising platforms in the world, and they probably wouldn't spare a thought about suing you into the ground for lost revenues if (when) they found out...

I know adware platforms have been around for a long time, but penetrating SSL-secured sites like FB to inject ads is playing with fire.

---

If the client *decides* to mess with FB ads they can do so, we dont have any built in functionality to do that. Also, do you think adblockers are illegal? The user installs them to block ads, thats against their TOS/EULA right? Does FB sue them also? No, because the user decides to install the modification, same as we a compliant adware install.

---

So you are totally cool with the fact that you are building tools that potentially compromise secured and trusted connections between website and user?

---

Home > Paid Traffic Sources > POP / PPV / Redirect