May 2, 2024 08:34 AM
(This post was last modified: May 2, 2024 08:40 AM by JDoawp.)
Heya, quick google search unfortunately doesn't reveal any answers.
There's a website I frequently downloaded files from. To make life a bit easier since they stored their files is a pseudo random subdomain I wrote a java app that scans my clipboard for that websites URL, extracts ID of the file pings the different known subdomains where the files used to be stored and when it got a hit used an HttpURLConnection to open a filestream and download the file directly. At first to bypass some random bad security I had to fake some cookies and request headers. But now they've started to use cloudflare to protect the subdomain, which means that whenever you try to access the raw file it'll spit out a 403 access denied error. Basically only allowing you to view the files through their normal domain and file viewer.
I've tried updating my request headers to match the ones I see in the http GET request made from the website to where the raw file is stored. I'm aware of hashing and such but I see nothing in there out of the ordinary that isn't just things like basic browser data and content size in bytes.
Trying to download the files through browser addons doesn't work either, assuming they do pretty much what I've made my app to do, just a get request to where its found the raw file. Although worth noting, there is a download option on the site, but it's through some php method and is protected to certain users.
Is this a dead end? I'm experienced in sysdev not much security sadly :')
There's a website I frequently downloaded files from. To make life a bit easier since they stored their files is a pseudo random subdomain I wrote a java app that scans my clipboard for that websites URL, extracts ID of the file pings the different known subdomains where the files used to be stored and when it got a hit used an HttpURLConnection to open a filestream and download the file directly. At first to bypass some random bad security I had to fake some cookies and request headers. But now they've started to use cloudflare to protect the subdomain, which means that whenever you try to access the raw file it'll spit out a 403 access denied error. Basically only allowing you to view the files through their normal domain and file viewer.
I've tried updating my request headers to match the ones I see in the http GET request made from the website to where the raw file is stored. I'm aware of hashing and such but I see nothing in there out of the ordinary that isn't just things like basic browser data and content size in bytes.
Trying to download the files through browser addons doesn't work either, assuming they do pretty much what I've made my app to do, just a get request to where its found the raw file. Although worth noting, there is a download option on the site, but it's through some php method and is protected to certain users.
Is this a dead end? I'm experienced in sysdev not much security sadly :')
