Let's decode this PDF parasite with together

javadth

javadth

Elite Member
Jr. VIP
Joined
Aug 27, 2012
Messages
3,157
Reaction score
1,145
None of this website or uploaded content is affiliated with me

HI everyone
well at first i was thinking about a topic for Daily parasites opportunities, but when I found 1st website to use parasite method, I stuck in first steps
so i need your help

the website is :
nupd.northeastern.edu

ad4a6d45ad45ad.JPG


and this is the Ahrefs
a54da54d5a4d65a4d56a4d56.JPG

Also, i found uploading forms
nupd.northeastern.edu/our-services/police-detail/


problem : the problem is when you are uploading a PDF file it renames it and this is the point i stopped , i used Mozilla F12 console but i couldn't find the renamed file name and location

maybe somewhere
Code: 
nupd.northeastern.edu/wp-content%2Fuploads%2Fwpforms%2Ftmp%2F96bcfa2c4caefb28b14d6521a57f1f51.pdf
 
Advertise on BHW
Interested in knowing about this too. bookmarked to follow.
 
Steptoe said:
The final url is in the
Code: 
"url": "https:\/\/xxx.pdf"
json response after the upload is completed.
Click to expand...


file name changes when you upload it
 
Yes, but the amended filename is exposed in the final json response from admin-ajax.php.

Eg:
Code: 
{
    "success": true,
    "data": {
        "name": "489622.pdf",
        "file": "2ef86d4f54427af5ca4d135d59670fa7.pdf",
        "url": "https:\/\/xxxx.gov\/wp-content\/uploads\/wpforms\/tmp\/2ef86d4f54427af5ca4d135d59670fa7.pdf",
        "size": 99187,
        "type": "application\/pdf",
        "file_user_name": "489622.pdf"
    }
}
 
Can you tell me the name of one of the files you uploaded, the exact name?
 
Steptoe said:
Yes, but the amended filename is exposed in the final json response from admin-ajax.php.

Eg:
Code: 
{
    "success": true,
    "data": {
        "name": "489622.pdf",
        "file": "2ef86d4f54427af5ca4d135d59670fa7.pdf",
        "url": "https:\/\/xxxx.gov\/wp-content\/uploads\/wpforms\/tmp\/2ef86d4f54427af5ca4d135d59670fa7.pdf",
        "size": 99187,
        "type": "application\/pdf",
        "file_user_name": "489622.pdf"
    }
}
Click to expand...

how did u get that? which plugin or software?
 
Steptoe said:
Chrome dev tools (F12). Have it open and running when you're on the form, upload a file, and track the requests to admin-ajax.php
Click to expand...

im using mozilla
possible to do same in mozilla?

if u have time help me with a quick clip or some screenshot

thanks
 
javadth said:
im using mozilla
possible to do same in mozilla?

if u have time help me with a quick clip or some screenshot

thanks
Click to expand...
Sorry, I haven't used Mozilla since pre-Covid.

adminajax.png
 
admin-ajax.php is the file that performs most of Wordpress's front end requests. Get to know it intimately ;)
 
Keep sharing lads, lets dig deeper! You think admins have caught on yet?
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top