Grabbing JPJ latest Plate No

Unlike many of Malaysia government website, JPJ is serious about protecting their latest car plate info found in their website. The plate info can be found at url http://www.jpj.gov.my/transaksi-percuma-no.-pendaftaran-terkini

If you look into the source code, you would find that this info is actually in an external page included thru iframe. The exact url would be: http://blacklist.jpj.gov.my/malay/plateno.shtml Which will give you this error page when u try to open it separately in browser,

I figured out the protection method should be simple, most probably using http referrer checking. so by using a simple code as below, i can bypass the simple security checking easily and acquired the real content.

$cc = new cURL(true, $cookieFilePath, 'gzip', '', $userAgent);
$cc->referrer = "http://www.jpj.gov.my/transaksi-percuma-no.-pendaftaran-terkini";

$url= "http://blacklist.jpj.gov.my/malay/plateno.shtml";
$htmlPageBuffer = $cc->get($url, "");

echo $htmlPageBuffer;

$cc = new cURL(true, $cookieFilePath, 'gzip', '', $userAgent);

$cc->referrer = "http://www.jpj.gov.my/transaksi-percuma-no.-pendaftaran-terkini";

$url= "http://blacklist.jpj.gov.my/malay/plateno.shtml";

$htmlPageBuffer = $cc->get($url, "");

echo $htmlPageBuffer;

Note: this piece of code is just a snapshot part of the complete one. So, checking http referrer is a very simple protection method that will not works against advance grabbing technique where the referrer url can be fake.

YS Tech Share

Sharing knowledge and information on geeky stuff

Grabbing JPJ latest Plate No