+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [HOT]Download from a paypal site without paying![HOT] (/showthread.php?tid=5352718)
[HOT]Download from a paypal site without paying![HOT] - Root.NoIdentity - Jul 26, 2016
Just a little basic html tip for those who are trying to download an application from sites which has an paypal order page & link to start you off.
Use a proxy when you try this to hide your ip as some sites will record your ip when you connect for security.
1) Rightclick your mouse (ctrl+click) viewsource and open the source of the site in an a texteditor
2) Search for the word "return"
3) Next to it you can find the url for the thank you page
4) Copy the url and paste it in your browser and you will see the download link
This works only if you can download instantly after payment, it will not work if the link needs to be emailed to you.
You can try it here to start with:
Code:
ramphelp.com/halfpipe.html
About half way down the page you will find:
<input type="hidden" name="return" value="ramphelp.com/65984523/thanks/68912hp654/26865thankyouhp08363215423.html ">
Copy the link into your browser and download.
🤝
* - amagos10 - Jul 28, 2016
Site fixed the issue and just because this site was poorly coded doesn't mean every site with paypal payments is coded the same.
This vulnerability is just for that site..
* - DROP TABLE users - Jul 29, 2016
There are actually lots of websites where that exploit can be used. But like you said not all of them work like that. Also you can use google to search a dork site "inurl:thanksforpurchasing.html"