Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to Chain Vulnerabilities for RCE: From Image Metadata to Complete System Compromise

hackenproof.com | research | #rce | #pentesting | #cve | #ssrf | #command-injection | #attack-chain

Summary

A CTF postmortem: five chained flaws — from exiftool metadata revealing wkhtmltopdf, through traversal, SSRF and command injection — produced an unauthenticated CVSS 10.0 RCE in 3h15m.
Published
Collected

original ↗

Related coverage

  1. Vulnerabilities in the Openfire Admin Console (swarm.ptsecurity.com)
  2. Turning Email Template Injection into Remote Code Execution (labs.cognisys.group)
  3. Apache Proxy Paradox CVE-2021-40438 (labs.cognisys.group)
  4. Supabase Leaks, What We Found (labs.cognisys.group)
  5. Cracking the lens: targeting HTTP's hidden attack-surface (portswigger.net)
  6. Drag and Pwnd: Leverage ASCII characters to exploit VS Code (portswigger.net)

back