Checking the PDF’s Document Properties (available via the “More Actions” menu) often exposes the software used for conversion. In this challenge, the metadata reveals wkhtmltopdf 0.12.5 as the conversion engine.
Use code with caution.
The uploaded PDF file can be used to execute arbitrary code on the system. pdfy htb writeup upd
is an easy-difficulty web challenge featured on Hack The Box (HTB) . The challenge tests a player's ability to recognize a Server-Side Request Forgery (SSRF) vulnerability and leverage it alongside an underlying component flaw to achieve Local File Inclusion (LFI). Checking the PDF’s Document Properties (available via the
The script should redirect the requester to the target local file on the HTB server. Use code with caution. Copied to clipboard pdfy htb writeup upd
Start with an nmap scan to discover open ports.