webmedium

Скрипторий Архимага (Scriptorium)

caplag

Task: PDF generation service using wkhtmltopdf with HTML/markdown input. Solution: Bypass HTML filter by using markdown format with inline HTML, then exploit wkhtmltopdf file:// protocol support via iframe injection to read local files.

$ ls tags/ techniques/
flaskssrflfifilter_bypasswkhtmltopdfpdf_generationfile_protocolmarkdown
wkhtmltopdf SSRF/LFI via file:// protocolHTML filter bypass via markdown format switchingLocal File Inclusion through PDF generator iframe injection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]