Submit the URL to your hosted exploit.php in the target application's input field. The server follows the redirect and renders the target file in the PDF. Step 3: Extracting the Flag
This writeup explores , a web-based Hack The Box (HTB) challenge categorized as "Easy." This challenge is a classic introduction to Server-Side Request Forgery (SSRF) , demonstrating how an application that renders web pages into PDFs can be coerced into leaking sensitive internal files. Challenge Overview Category: Web Difficulty: Easy
HTB PDFy Challenge Walkthrough: Exploiting SSRF to Arbitrary File Read
: Older versions of wkhtmltopdf are highly susceptible to SSRF and Local File Inclusion (LFI). If the engine processes HTML containing local file system schema URI pointers ( file:// ), it natively attempts to embed those local files into the generated document.