Hi folks,
Could someone give me a hint or let me know if I’m heading in the right direction to solve this challenge?
First, I tried several attempts to input code into the HTML text area that could render secret.php into a converted PDF document. Unfortunately, it didn’t work.
Next, I looked into vulnerabilities in the DOMPDF library. I discovered one critical vulnerability that could be exploited through a malicious CSS file and font, but it didn’t seem like a viable approach.
I also found some other vulnerabilities for DOMPDF, but I wasn’t able to exploit them.
Any help would be greatly appreciated!
Thank you.