Media Badge

ODF XXE

• This exercise covers the exploitation of an XXE in an ODF Parser
• Takes -- on average

• This exercise covers how you can read arbitrary files when an application generates pdf from a link you provide
• 1 video
• Completed by 732 students
• Takes Less than an hour on average

• This exercise covers the exploitation of a PHP application using XSL
• 2 videos
• Completed by 168 students
• Takes Less than an hour on average
• PHP
• CWE-94,CWE-306

• This exercise covers the exploitation of a PHP application using XSL
• 2 videos
• Completed by 141 students
• Takes Less than an hour on average
• PHP
• CWE-94

• This exercise covers the exploitation of a vulnerability in the DOMPDF library
• 2 videos
• Completed by 72 students
• Takes Less than an hour on average
• PHP

• This exercise covers the exploitation of CVE-2022-39224
• 1 video
• Completed by 33 students
• Takes Between 2 and 4 hours on average
• Ruby
• CWE-78

• This exercise covers the exploitation of a PHP application using XSL
• 2 videos
• Completed by 101 students
• Takes Less than an hour on average
• PHP
• CWE-94

• This exercise covers the exploitation of a PHP application using XSL
• 2 videos
• Completed by 77 students
• Takes Between 2 and 4 hours on average
• PHP
• CWE-94

• This exercise covers the exploitation of a vulnerability in the DOMPDF library
• 2 videos
• Completed by 26 students
• Takes Between 2 and 4 hours on average
• PHP

• This exercise covers the exploitation of a Java application using XSL
• 2 videos
• Completed by 55 students
• Takes Less than an hour on average
• Java

• This exercise covers the exploitation of a vulnerability in the DOMPDF library
• 1 video
• Completed by 14 students
• Takes Between 2 and 4 hours on average
• PHP

• This exercise covers how you can read abitrary files when an application use ffmpeg to render videos from a video you provide
• Completed by 194 students
• Takes Between 1 and 2 hours on average
• Ruby/FFMpeg
• CWE-918

• This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
• Completed by 32 students
• Takes Less than an hour on average
• CWE-94,CWE-74

• This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS
• Completed by 91 students
• Takes Less than an hour on average
• CWE-88

• This exercise covers how you can read abitrary files when an application use ffmpeg to render videos from a video you provide
• Completed by 96 students
• Takes Less than an hour on average
• Ruby/FFMpeg
• CWE-918

• This exercise covers the exploitation of a PHP application using XSL
• 2 videos
• Completed by 59 students
• Takes Between 1 and 2 hours on average
• PHP
• CWE-94

• This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
• 1 video
• Completed by 130 students
• Takes Between 1 and 2 hours on average
• CWE-74

• This exercise covers the automation of the exploitation of a vulnerability in the DOMPDF library
• Completed by 7 students
• Takes More than 4 hours on average
• PHP