Not working

[CormacZ]

it just gonna be like this

[chamomile93]

It happened to me when trying to download from the java archive downloads, for exemple jdk 11.0.4.
Otherwise, working great for non java archive downloads !

[CypherpunkSamurai]

It happened to me when trying to download from the java archive downloads, for exemple jdk 11.0.4. Otherwise, working great for non java archive downloads !

Thanks @CormacZ and @yanisallouch for reporting. Can you please provide the urls so I can reproduce the bug?

[chamomile93]

In my case, i wanted to download 11.0.4, the

1. original url is : https://download.oracle.com/otn/java/jdk/11.0.4+10/cf1bbcbf431a474eb9fc550051f4ee78/jdk-11.0.4_windows-x64_bin.exe (with login but working)

2. modified url with your script is : https://edelivery.oracle.com/otn-pub/java/jdk/11.0.4+10/cf1bbcbf431a474eb9fc550051f4ee78/jdk-11.0.4_windows-x64_bin.exe (without login but fail)

[CypherpunkSamurai]

The cdns on jdk downloads and mysql downloads seem to check for login cookies now. This script exploited a flaw in their cdn that is the direct download cdn wont check for cookies. They seem to have fixed it for jdk and mysql downloads.

So we need to find something else / some other url endpoint to download it. We can also keep a public account cookie in the repo and people can use it from the script.

Feel free to give suggestions.

[CypherpunkSamurai]

Just confirmed 11.0.4 doesn't have any exploits.

[chamomile93]

The cdns on jdk downloads and mysql downloads seem to check for login cookies now. This script exploited a flaw in their cdn that is the direct download cdn wont check for cookies. They seem to have fixed it for jdk and mysql downloads.

So we need to find something else / some other url endpoint to download it. We can also keep a public account cookie in the repo and people can use it from the script.

Feel free to give suggestions.

We could fetch the list of logins from here : http://bugmenot.com/view/oracle.com login with the first credential

[CormacZ]

We could fetch the list of logins from here : http://bugmenot.com/view/oracle.com login with the first credential

Ah, this work very well! Thanks