Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Last Standing Issue : Blur Page which occurs on some pages #3

Open
lol98lol98x opened this issue Feb 10, 2024 · 19 comments
Open

Last Standing Issue : Blur Page which occurs on some pages #3

lol98lol98x opened this issue Feb 10, 2024 · 19 comments
Assignees
Labels
bug Something isn't working enhancement New feature or request help wanted Extra attention is needed

Comments

@lol98lol98x
Copy link

I am personally having issues with removing the blur myself. And I see your code also is.

Any thoughts or ideas on how to get around this? Or how it is chosen which pages will be blurred?
I cant even manually figure out how to bypass the blur in dev tools.

@danieltyukov
Copy link
Owner

Well, they arent blurring the images, they are just fetching a low res png image from their server and scaling to look blurred, it's just a big low-resolution picture. I am looking into it.

You can star the repo and check in once in a while or also do pull requests for suggestions.

@lol98lol98x
Copy link
Author

lol98lol98x commented Feb 10, 2024

I noticed it was a tiny image too, after playing with the html. Any ideas on what can be done to resolve this? There has to be an original image we can find and load somehow. However it may be dynamic and difficult to do. As I think they're using a self hosted and outside CDN for things now. They are doing this to attempt to fix these bypass methods.

@danieltyukov danieltyukov changed the title blur Last Standing Issue : Blur Page which occurs on some pages Feb 23, 2024
@teahcerzpet
Copy link

Hey @danieltyukov or @lol98lol98x any chance you guys have thought of a fix for this? Praying you do somehow :(

@danieltyukov danieltyukov self-assigned this Feb 23, 2024
@capellavacancies
Copy link

Hello, I installed 2.3.0 on edge/mac and still get blurred pages.

Thanks

@L30-stack
Copy link
Contributor

Hey @danieltyukov,
dont know if you ralized yet, but fetching the low res images p. ex.: "page3.webp" as the file "bg3.png" will return you the full res image from the server without checking any authentification ;)

Im currently still having my finals but would love to help you implement a workaround!

@lol98lol98x
Copy link
Author

lol98lol98x commented Mar 3, 2024

@L30-stack > Hey @danieltyukov, dont know if you ralized yet, but fetching the low res images p. ex.: "page3.webp" as the file "bg3.png" will return you the full res image from the server without checking any authentification ;)

Im currently still having my finals but would love to help you implement a workaround!

Show me an example link vs what it should be. And I'll try to automate it via javascript

Because when I try what you said I get this.

NoSuchKey The specified key does not exist.

@danieltyukov
Copy link
Owner

Hey @danieltyukov, dont know if you ralized yet, but fetching the low res images p. ex.: "page3.webp" as the file "bg3.png" will return you the full res image from the server without checking any authentification ;)

Im currently still having my finals but would love to help you implement a workaround!

really cool man, if you can either make a pr or drop me some instructions on how you achieve that ill make a release under your name for this repo.

@L30-stack
Copy link
Contributor

@L30-stack > Hey @danieltyukov, dont know if you ralized yet, but fetching the low res images p. ex.: "page3.webp" as the file "bg3.png" will return you the full res image from the server without checking any authentification ;)

Im currently still having my finals but would love to help you implement a workaround!

Show me an example link vs what it should be. And I'll try to automate it via javascript

Because when I try what you said I get this.

NoSuchKey The specified key does not exist.

Low res: https://d3tvd1u91rr79.cloudfront.net/b1f775b9fb4cc517f7e50863041335de/html/pages/blurred/page3.webp?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6XC9cL2QzdHZkMXU5MXJyNzkuY2xvdWRmcm9udC5uZXRcL2IxZjc3NWI5ZmI0Y2M1MTdmN2U1MDg2MzA0MTMzNWRlXC9odG1sXC9wYWdlc1wvYmx1cnJlZFwvKiIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcwOTU3NTM4N319fV19&Signature=D0-Qczqko9gbzBzdVzQOY2h6vKsrzthtsAOO8-CXqLh0c5Fi27BUIilYSucZT8zL2hLhOiCD84rRKYtHL~lTleHfGpyE-Xs9-w81HWAqM2ggm7onFoaZUdQWMMm8rFJ6cFYai4n4AebexKcevWmcD-i66CSwW7ZUZJf9wH0ODgO-pxbrzN5TXH0xFXeXBpMBUTaiC65fpBjDlUxzehs8MMushUpOH8u698rzF55WH82yGeqgCghZ5sEtdlObuPZ1vQRI1xRplwJVseyia0NLBmQ3O9Q-0NcOvvPJlrGhccK8NtEoe0mn4NFujatfeVRlHYRANyNVd28RoD2i2RtMzQ__&Key-Pair-Id=APKAJ535ZH3ZAIIOADHQ

high res: https://d3tvd1u91rr79.cloudfront.net/b1f775b9fb4cc517f7e50863041335de/html/bg3.png?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6XC9cL2QzdHZkMXU5MXJyNzkuY2xvdWRmcm9udC5uZXRcL2IxZjc3NWI5ZmI0Y2M1MTdmN2U1MDg2MzA0MTMzNWRlXC9odG1sXC8qLnBuZyIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcwOTU3NTM4N319fV19&Signature=aGs9V2e4IXz8D-FBuCel-vs6ETAeJVZ4R8mXDef3UmM1KqXLrakG6f1oVpIS~E6iZdxT0bgQ6Brdm~Fz8jLKKE6pJiUFeAqYhYL2EwV8c6pXRv6oSD-Tbi-PKGfaZFzJnsTF1TewmBwo75HfBXf6l2bkSjRrRltNc6tMxnWCE~uPQTZ8xuVQtT9IuA3WZWn4u4-XTgVC8-lXIatx8h~Iq~FsSJ7V0sgIGmXpTi8bJZkMu9YgBgmuuMBOruNZStgTJcO-PaS~PoUUdhaZVUkRCmzPnfDyyvDI7gFAZz7lDcD8KNpz8T9NyspZLPmfrZf5gPtW2jdF4aVUYeH~8GIETQ__&Key-Pair-Id=APKAJ535ZH3ZAIIOADHQ

But I'm giving it a try rn.

@o0LINNY0o
Copy link

For a noob ,,, how to you fetch the *.png instead .

Right Clicking and saving isnt working

@L30-stack
Copy link
Contributor

L30-stack commented Mar 9, 2024

@o0LINNY0o in the newest commit the png should be fetched automatically and is added to the created print-preview.
If there occur any issues let me know :)

@o0LINNY0o
Copy link

o0LINNY0o commented Mar 9, 2024

@o0LINNY0o in the newest release the png should be fetched automatically and is added to the created print-preview. If there occur any issues let me know :)

i downloaded and install the source and the 2.3.0 and i still get this :

https://imgur.com/a/8DaIfAl

EDIT: 2.3.0 also gives m,e this error:

downloadBtn.innerHTML = 'Download';
downloadBtn.addEventListener('click', (event) => {

@L30-stack
Copy link
Contributor

There is no release for the current changes yet. Please download the code manually.

Furthermore could you please add a fullscreen screenshot and the full error message.

@o0LINNY0o
Copy link

o0LINNY0o commented Mar 10, 2024

Sure thing & thanks for your support.

Here is the 2.3.0 Error
https://imgur.com/a/oxRUf1C

EDIT: Just realised the previous post cut away alot of it. But if i edit it , its still there ???

the Manually Downloaded Code was creating a clear download , but the pages were made up of the previous clear picture...

eg. Page 2 was repeated for a blurred out Page 3

@danieltyukov
Copy link
Owner

@L30-stack @o0LINNY0o
https://github.com/danieltyukov/studocuhack/releases/tag/v2.4.0

latest release has the changes fixing the error + L30 changes, feedback is welcome, ill keep this issue open for now

@danieltyukov
Copy link
Owner

@L30-stack the blur page is still there, I am still checking over your added code, and your reference links, I think they added secure protection for those pages on the server side right?

@danieltyukov danieltyukov added the enhancement New feature or request label Mar 10, 2024
@danieltyukov danieltyukov pinned this issue Mar 10, 2024
@L30-stack
Copy link
Contributor

L30-stack commented Mar 10, 2024

Hey @o0LINNY0o,

I just tested your document. The issue you get is unfortunately currently not supported.

Studocu sometimes separates documents in a background (we support loading the full res image) and text in the front (currently not supported).

Therefore in your case the text from page 1 is displayed in all pages where the new background was added but no text was available. (Page 3,6,9...)

@L30-stack
Copy link
Contributor

@L30-stack the blur page is still there, I am still checking over your added code, and your reference links, I think they added secure protection for those pages on the server side right?

The full res pages are only added to the pdf document view in the second window. Still works fine for me

@danieltyukov danieltyukov added bug Something isn't working help wanted Extra attention is needed labels Mar 24, 2024
@tooxo
Copy link

tooxo commented Aug 1, 2024

From the network logs, it looks like they implemented something similar to this: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-signed-urls.html

I don't think this is possible to circumvent.

@danieltyukov
Copy link
Owner

@tooxo i am currently overall studying their method, this part you got right, here is some basic info you can then through reference dig deeper on bypassing that stuff too https://labs.detectify.com/writeups/bypassing-and-exploiting-bucket-upload-policies-and-signed-urls/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

7 participants