Username: 
Password: 
Restrict session to IP 

Hint?  Go to the Fineprint challenge

Global Rank: 13420
Totalscore: 205
Posts: 1
Thanks: 1
UpVotes: 1
Registered: 12d 18h
Last Seen: 5d 3h
The User is Offline
Hint?
Google/translate1Thank You!1Good Post!0Bad Post! link
Hi folks,

Could someone give me a hint or let me know if I’m heading in the right direction to solve this challenge?

First, I tried several attempts to input code into the HTML text area that could render secret.php into a converted PDF document. Unfortunately, it didn’t work.

Next, I looked into vulnerabilities in the DOMPDF library. I discovered one critical vulnerability that could be exploited through a malicious CSS file and font, but it didn’t seem like a viable approach.

I also found some other vulnerabilities for DOMPDF, but I wasn’t able to exploit them.

Any help would be greatly appreciated!

Thank you.
tunelko, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, SwolloW, dangarbri, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 82 times.