So this is a method I'm sure many experts here already know, but then again, that's not who I'm trying to help. Additionally, it's not 100% guaranteed, but it definitely works for some. However use at your own risk because there's probably lots of legal issues, etc. Anyways, so to the good stuff. I'm going to use plugin from now on, but it works with theme too. 1. Find a plugin you want (for instance Themeforest or Codecanyon). I use those sites a lot. 2. Go to the comment section of the plugin and look at the most recent ones. Look at the usernames of those who purchased. 3. Now this takes a bit of detective work, but it's much easier than I figured it would be. Either go to their profile and look at their website or google their Username (many people use the same name). The best are comments where people ask the plugin creator to check out their site. 4. Go to their website , but add /wp-content/uploads to the end. I.E. If website was http://domain.com, it becomes http:domain.com/wp-content/uploads 5. You should see a bunch of zip files including the plugin you were looking for so just download it. Now many people have this page blocked from public access, but there's always someone who doesn't . A couple notes: 1. You can also check /wp-content/themes and /wp-content/plugins but those two are more likely to be hidden from what I've noticed. 2. These plugins/themes are NOT nulled, so you should do a manual check to see if there are call backs. If you don't know how, post it up to a forum and some members may do it for you *shrug*. 3. Don't be a complete jerk and if you love a plugin and decide to keep it for the long run, pay the developer. He/she put a lot of work into it. I use this method mainly to test out plugins because I run multisite with some themes and I know some plugins just aren't compatible. Mods: Fee free to move this to the right section and/or delete it if it violates any forum policies. I find this method much better than Google-ing open directories because most plugins are outdated and could be found anyways. Finding people who are unsure of how to implement a recently purchased plugin will usually generate an unprotected uploads directory with the latest version .