3 Videos for DOMPDF RCE II

In this video, we cover the DOMPDF RCE 2 challenge, focusing on exploiting HTML injection to achieve remote code execution without relying on remote asset downloading.

In this video, we cover the challenge DOMPDF RCE II, focusing on exploiting a vulnerability in DOMPDF by leveraging CSS and creating a polyglot font/phar file to gain code execution. This is part of the media badge series.

In this video, we continue exploiting DOMPDF RCE by leveraging a crafted PHAR file for remote code execution. Through base64 encoding, URL encoding, and manipulating the payload, we ultimately achieve command execution on the server.