I suggest that any injections cannot validate, we need a web URL so HTB web server can query to it and render through wkhtmltopdf.
1 Like
I was trying all on this link still got nothing (empty pdf with iframe). BTW i serve the page on my local accessing it from my VPN IP. any hint for the next?
I get the same. Blank pdf. Any updates?
Got the /etc/passwd file, but couldn’t find a flag. any hint?