Type your comment> @idomino said:
Type your comment> @arale61 said:
Didn’t get that changelog from the developer, but managed to get some dependencies file pointing to some conversion utility… then… generated a pdf from a normal docx and checked what was the version of the thing to try to attack… got to some papers and blogs,… tried to embed this to that, upload that and nothing! keep failing every single step. aux what a box…
Any help will be appreciated.pm please!
That’s exactly where I am XD I’m wondering if I should be looking at u*****.p and not c****.**p
But the thing here for me is in the conversion process since is the only form of input i see we can try to ‘control’.
I’ve being messing around with different types of XXE and SSRF attacks but i didn’t get any response back from them…
I will retry again, from the beginning, starting again from XXE… let’s see what i can get this time different.