Media Badge

22 Videos

20 Exercises

The media badge is our set of exercises created to teach you how to abuse applications that allows you to upload or retrieve files in different formats: PDF, Images, Videos and use this behaviour to gain code execution or arbitrary file read

Exercises

SSRF in PDF generation

This exercise covers how you can read arbitrary files when an application generates pdfs from provided links
1 video
Completed by 878 students
Takes < 1 Hr. on average

Coming soon

Easy

PENTESTERLAB

ODF XXE

This exercise covers the exploitation of an XXE in an ODF Parser
Takes -- on average

Coming soon

Medium

PENTESTERLAB

Latex: --shell-escape

This exercise covers how one can leverage latex when pdflatex is used with the --shell-escape option to gain command execution.
Takes -- on average
Ruby/Latex

This exercise covers how one can leverage image processing in ActiveStorage to gain command execution.
Completed by 12 students
Takes 1-2 Hrs. on average
Ruby/Rails

This exercise covers the exploitation of CVE-2022-39224
1 video
Completed by 96 students
Takes 2-4 Hrs. on average
Ruby
CWE-78

This exercise covers the exploitation of a vulnerability in the DOMPDF library
2 videos
Completed by 149 students
Takes < 1 Hr. on average
PHP

This exercise covers the exploitation of a PHP application using XSL
2 videos
Completed by 232 students
Takes < 1 Hr. on average
PHP
CWE-94

This exercise covers the exploitation of a PHP application using XSL
2 videos
Completed by 275 students
Takes < 1 Hr. on average
PHP
CWE-94,CWE-306

This exercise covers the exploitation of a PHP application using XSL
2 videos
Completed by 169 students
Takes < 1 Hr. on average
PHP
CWE-94

This exercise covers the exploitation of a PHP application using XSL
2 videos
Completed by 145 students
Takes 2-4 Hrs. on average
PHP
CWE-94

CVE-2021-33564 Argument Injection in Ruby Dragonfly

This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS
Completed by 142 students
Takes < 1 Hr. on average
CWE-88

This exercise covers the exploitation of a vulnerability in the DOMPDF library
3 videos
Completed by 70 students
Takes 2-4 Hrs. on average
PHP

CVE-2021-22204: Exiftool RCE II

This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
Completed by 78 students
Takes < 1 Hr. on average
CWE-94,CWE-74

This exercise covers the exploitation of a Java application using XSL
2 videos
Completed by 119 students
Takes < 1 Hr. on average
Java

This exercise covers the exploitation of a vulnerability in the DOMPDF library
2 videos
Completed by 55 students
Takes 2-4 Hrs. on average
PHP

SSRF via FFMPEG

This exercise covers how you can read arbitrary files when an application uses ffmpeg to render videos from a video you provide
Completed by 243 students
Takes < 1 Hr. on average
Ruby/FFMpeg
CWE-918

CVE-2021-22204: Exiftool RCE

This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
1 video
Completed by 174 students
Takes 1-2 Hrs. on average
CWE-74

This exercise covers the exploitation of a PHP application using XSL
2 videos
Completed by 113 students
Takes < 1 Hr. on average
PHP
CWE-94

SSRF via FFMPEG II

This exercise covers how you can read arbitrary files when an application uses ffmpeg to render videos from a video you provide
Completed by 127 students
Takes < 1 Hr. on average
Ruby/FFMpeg
CWE-918

This exercise covers the automation of the exploitation of a vulnerability in the DOMPDF library
Completed by 24 students
Takes > 4 Hrs. on average
PHP