Best Blackhat Forum

I just wanted to let BHW know that there are many ways to get products yourself, without having to request them!



I'm sure most of you saw the robots.txt trick posted a while back, and now I want to share another method I like to use.



More and more sites are turning to WordPress for their base instead of HTML, because it's easier, nicer, and better to work with.



BUT there is one big flaw in many of these sites.




If you find a website hosted on wordpress, trying to sell a product, then they probably only have the "Home" page visible on the nav bar and maybe the "About Us" page.



What they won't have is the page with their download link. But luckily for us BH'rs, there's an easy way to find this download URL!



If you're not using firefox, this may not work exactly the same, but it will still work. Don't ask me to make a tutorial for another browser. I won't.



Step 1. Make sure the site is using WP

Quote:To do this, hit "CTRL + U" and look at the code. Look for either a WP copyright, or look for something like "wp-includes" in the first few lines of code. Alternatively, many sites just say "Powered by WordPress" at the bottom.

Step 2. While you're still viewing the source code, look for full page URL's. that are in green italics. They'll look something like "http://thisistheURL.com/?page_id=1."




Here's a screen of what I mean:



(The URL was darkened because this particular product is on the DNS list, therefore, I can't reveal the site)



Copy and paste those URL's until you've found the download page!



Happy Hunting!



Please give Reps and/or Thanks!!



Octane




Step 3. Now copy and paste that

Thanks for this.

I have also used the following with great success;

http://sitename/wp-admin/uploads

You of course need to establish/ensure that it is a WP one.

thanks for sharing !

also you can try site:domainname.com.
sometimes the download url or the registration link will be indexed by google.

Try going to the site and putting ?s=a after the url, this is the equivalent of the wordpress search bar searching for the letter a. on the home page you may only have a link to home but on the search page it will bring up any page links in the site, as an example try this: http://traffic-shockwave.com/?s=a this will show all pages on the traffic-shockwave.com site, the second menu link (labeled 11-2931as) is the thank you page, enjoy :)

hahah... thats why I don't host downloads on WP sites, I host them separately on S3 or RackSpace CDN... faster and you need to know the entire download URL in order to leech.