Media Badge

ODF XXE

• This exercise covers the exploitation of an XXE in an ODF Parser
• Takes -- on average

• This exercise covers how you can read arbitrary files when an application generates pdf from a link you provide
• 1 video
• Completed by 690 students
• Takes Less than an hour on average

• This exercise covers the exploitation of a PHP application using XSL
• 2 videos
• Completed by 111 students
• Takes Less than an hour on average
• PHP
• CWE-94,CWE-306

• This exercise covers the exploitation of a PHP application using XSL
• 2 videos
• Completed by 93 students
• Takes Less than an hour on average
• PHP
• CWE-94

• This exercise covers the exploitation of a vulnerability in the DOMPDF library
• Completed by 39 students
• Takes Less than an hour on average
• PHP

• This exercise covers the exploitation of CVE-2022-39224
• Completed by 13 students
• Takes Between 2 and 4 hours on average
• Ruby
• CWE-78

• This exercise covers the exploitation of a PHP application using XSL
• 2 videos
• Completed by 57 students
• Takes Less than an hour on average
• PHP
• CWE-94

• This exercise covers the exploitation of a PHP application using XSL
• 2 videos
• Completed by 35 students
• Takes Between 2 and 4 hours on average
• PHP
• CWE-94

• This exercise covers the exploitation of a vulnerability in the DOMPDF library
• Completed by 8 students
• Takes Between 2 and 4 hours on average
• PHP

• This exercise covers the exploitation of a Java application using XSL
• Completed by 31 students
• Takes Less than an hour on average
• Java

• This exercise covers the exploitation of a vulnerability in the DOMPDF library
• Completed by 6 students
• Takes Between 2 and 4 hours on average
• PHP

• This exercise covers how you can read abitrary files when an application use ffmpeg to render videos from a video you provide
• Completed by 177 students
• Takes Between 1 and 2 hours on average
• Ruby/FFMpeg
• CWE-918

• This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
• Completed by 19 students
• Takes Less than an hour on average
• CWE-94,CWE-74

• This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS
• Completed by 68 students
• Takes Less than an hour on average
• CWE-88

• This exercise covers how you can read abitrary files when an application use ffmpeg to render videos from a video you provide
• Completed by 86 students
• Takes Less than an hour on average
• Ruby/FFMpeg
• CWE-918

• This exercise covers the exploitation of a PHP application using XSL
• 2 videos
• Completed by 29 students
• Takes Between 1 and 2 hours on average
• PHP
• CWE-94

• This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
• 1 video
• Completed by 111 students
• Takes Between 1 and 2 hours on average
• CWE-74

• This exercise covers the automation of the exploitation of a vulnerability in the DOMPDF library
• Completed by 3 students
• Takes More than 4 hours on average
• PHP