XSS in PDF.js (CVE-2024-4367) - "Upload" [Akasec CTF 2024]

[@ca7986]

Love this walk through! ++🇵🇸

[@Fereterme]

Great explanation of your thought process and tools used 🤖

[@tsuryu]

thank you for the walkthrough!

[@tech-with-joe]

Nice, loved it good explanation!

[@jm1981]

Awesome work as always my friend.

[@_CryptoCat]

Thanks mate! 👊

[@adasadasoc1134]

thanks for note Palestine and respect it, big love Crypto❤

[@_CryptoCat]

💜💜💜

[@aaasambik3434]

Cryptocat, could you pls shoot walkthrough web challenges from downunder 2024 ctf

[@_CryptoCat]

Didn't play this weekend, sorry! 💜

[@HopliteSecurity]

Amazing work! 👏👏

[@_CryptoCat]

Thank you! 👊

[@samaawake]

The video is awesome! I've learn a lot of ideas and skills. By the way, Could you please introduce the script qtunnel that you used to connect the local web service to the public network? I would like to have a useful tool like that.

[@_CryptoCat]

Thanks! So `qtunnel` is just a bash alias which calls tunnelto (tunnelto.dev) with my specified subdomain and port, while the `webup` command is `python3 -m http.server 80` I use tunnelto because it allows me to reuse the same address, but it has a yearly fee. Previously I just used a free alternative like ngrok (you can run `ngrok http 80` to achieve the same) or requestbin

[@samaawake]

@@_CryptoCat Thanks for your help. I learned how to use ngrok for Intranet Penetration and achieved the same results as shown in the video. Your patient explanations were very helpful for me as a CTF beginner, thank u again!!!❤❤❤

[@_CryptoCat]

Awesome! No problem 💜

[@WtfAnupam]

Cool, learned something new :))

[@Lazy0ben]

great job

[@_CryptoCat]

Thank you! 💜

[@sqlihunter]

Crypto Cat, could you please create a series on Hacking Hub CTF? It's based on real-world bug bounty scenarios . ;)

[@_CryptoCat]

Been meaning to do this for sure! Some great labs on there.

[@ssetdragon]

Awesome

[@ABDOE_MARKETING]

akasec 1337 morroco do a great job , free palestine

[@Strategic.]

Really cool stuff!! Free Palestine

[@wazawanaIT]

great job and Freeee PS

[@dprozzes5945]

Hello 👋🏻

[@_CryptoCat]

Hey 👋

[@stylo20220]

💀

[@_CryptoCat]

☠

[@highlights973]