3 Videos for DOMPDF RCE II
Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
DOMPDF RCE II: Introduction
In this video, we cover the DOMPDF RCE 2 challenge, focusing on exploiting HTML injection to achieve remote code execution without relying on remote asset downloading.
04:07
45
Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
DOMPDF RCE II: Exploitation - part 1
In this video, we cover the challenge DOMPDF RCE II, focusing on exploiting a vulnerability in DOMPDF by leveraging CSS and creating a polyglot font/phar file to gain code execution. This is part of the media badge series.
04:58
165
Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
DOMPDF RCE II: Exploitation - part 2
In this video, we continue exploiting DOMPDF RCE by leveraging a crafted PHAR file for remote code execution. Through base64 encoding, URL encoding, and manipulating the payload, we ultimately achieve command execution on the server.
06:55
153