Hint? Vai alla sfida "Fineprint"
Posizione globale: 14118
Punteggio totale: 213
Posts : 1
Grazie: 1
Voti+: 2
Registrato: 1a 304gg
Ultima visita: 1a 297gg
L'utente è Offline
Hint?
03 Gen 2025 - 16:13:35 (1a 300gg)
03 Gen 2025 - 16:13:35 (1a 300gg)
Hi folks,
Could someone give me a hint or let me know if I’m heading in the right direction to solve this challenge?
First, I tried several attempts to input code into the HTML text area that could render secret.php into a converted PDF document. Unfortunately, it didn’t work.
Next, I looked into vulnerabilities in the DOMPDF library. I discovered one critical vulnerability that could be exploited through a malicious CSS file and font, but it didn’t seem like a viable approach.
I also found some other vulnerabilities for DOMPDF, but I wasn’t able to exploit them.
Any help would be greatly appreciated!
Thank you.
Could someone give me a hint or let me know if I’m heading in the right direction to solve this challenge?
First, I tried several attempts to input code into the HTML text area that could render secret.php into a converted PDF document. Unfortunately, it didn’t work.
Next, I looked into vulnerabilities in the DOMPDF library. I discovered one critical vulnerability that could be exploited through a malicious CSS file and font, but it didn’t seem like a viable approach.
I also found some other vulnerabilities for DOMPDF, but I wasn’t able to exploit them.
Any help would be greatly appreciated!
Thank you.
Posizione globale: 198
Punteggio totale: 110647
Posts : 1795
Grazie: 1390
Voti+: 961
Registrato: 18a 259gg
Ultima visita: 65gg 12ore
L'utente è Offline
RE: Hint?
24 Gen 2025 - 13:06:59 (1a 279gg)
24 Gen 2025 - 13:06:59 (1a 279gg)
It's much easier.
But if you find real interesting vulns maybe share it with the vendor!
- giz
But if you find real interesting vulns maybe share it with the vendor!
- giz
The geeks shall inherit the properties and methods of object earth.
silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 923 volte.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 923 volte.