malicious-pdf

malicious-pdf copied to clipboard

Looking at the reference blog for Test4.pdf at https://insert-script.blogspot.com/2019/01/adobe-reader-pdf-callback-via-xslt.html it seems the href needs to be a UNC path like **\\\\test.com\whatever.xslt**. When running this script with test.com as the parameter...

alecdhuse

[Enhancement]

1

PDF Blind XSS payloads https://portswigger.net/research/portable-data-exfiltration

0xspade

j-arivazhagan

`test1.pdf` involves attempting to list `\\HOST\`, which fails because there's no share name mentioned. Mentioning a share name (even if it's non-existent) will correctly call the attacker. PR #15

captain-woof

`test1.pdf` was generated to access only `\\HOST\`, which may fail due to missing share name. Instead, if a share name is specified in the path, the listing request succeeds, like...

captain-woof