SlideShare hacked: Download any slide without logging in (even if the user has disabled downloading)

1. Look for the doc value in the embed code

doc=cms-1212252847434735-8

2. In your browse type http://s3.amazonaws.com/slideshare/ then the doc value and .pdf

http://s3.amazonaws.com/slideshare/cms-1212252847434735-8.pdf

3. Press enter and the full pdf is yours, any slide even if it’s displayed as not available to download.

If you get an AccessDenied response then try changing the bucket to ppt-download in the url

http://s3.amazonaws.com/ppt-download/trends-for-the-future-20403.pdf

Then if that doesn’t work try to see if its a presentation file by changing the extension to .ppt

http://s3.amazonaws.com/ppt-download/web-20-5316-25603.ppt


Long story…

It all started by trying to let users download slides without them having to have an account, by looking at the headers using Live HTTP headers and seeing where Slideshare gets the file from. e.g.

http://s3.amazonaws.com/ppt-download/atmedia2008profrontendengineering-1213136599624862-9.pdf?Signature=Khggv8yW1ecsSRwDz1TC08xml44%3D&Expires=1219235798&AWSAccessKeyId=1Z5T9H8PQ39V6F79V8G2

The only problem is you need to look at each request as you need to know the Signature, Expires and AWSAccessKeyId for the file as you can’t just use http://s3.amazonaws.com/ppt-download/atmedia2008profrontendengineering-1213136599624862-9.pdf

The second problem is that some downloads are not availiable to download so you can’t watch the request to find the location. Such as http://www.slideshare.net/drewm/content-management-without-the-killing

After finding that Hasin Hayder had discovered that you could view the xml file and download the swfs of each slide by using the doc/location.

http://s3.amazonaws.com/slideshare/cms-1212252847434735-8.xmlhttp://s3.amazonaws.com/slideshare/cms-1212252847434735-8-slide-1.swf

I just replaced .xml with pdf and it worked!

http://s3.amazonaws.com/slideshare/cms-1212252847434735-8.pdf

  1. phildawson posted this