Hint?  Go to the Fineprint challenge

Hi folks,

Could someone give me a hint or let me know if I’m heading in the right direction to solve this challenge?

First, I tried several attempts to input code into the HTML text area that could render secret.php into a converted PDF document. Unfortunately, it didn’t work.

Next, I looked into vulnerabilities in the DOMPDF library. I discovered one critical vulnerability that could be exploited through a malicious CSS file and font, but it didn’t seem like a viable approach.

I also found some other vulnerabilities for DOMPDF, but I wasn’t able to exploit them.

Any help would be greatly appreciated!

Thank you.

It's much easier.
But if you find real interesting vulns maybe share it with the vendor!

- giz