Media Badge

• This exercise covers how you can read arbitrary files when an application generates pdf from a link you provide
• 1 video
• Completed by 440 students
• Takes Less than an hour on average

• This exercise covers how you can read abitrary files when an application use ffmpeg to render videos from a video you provide
• Completed by 64 students
• Takes Between 1 and 2 hours on average
• Ruby/FFMpeg

CVE-2021-33564 Argument Injection in Ruby Dragonfly

• This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS
• Takes -- on average

• This exercise covers how you can read abitrary files when an application use ffmpeg to render videos from a video you provide
• Completed by 22 students
• Takes Less than an hour on average
• Ruby/FFMpeg

• This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
• Completed by 34 students
• Takes Less than an hour on average

CVE-2021-22204: Exiftool RCE II

• This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
• Takes -- on average