Course
In this exercise, you'll learn to exploit a vulnerability in <code>exiftool</code> discovered by William Bowling. The lab involves creating a malicious DjVu file to gain code execution by exploiting a flaw in the <code>eval(...)</code> function used by <code>exiftool</code>.
Skills covered
Injection
Operating System
Network
CWE-74
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.
