Articles

From PDF to Pwn: An Out-of-Band XXE via a vulnerable iText Library

This article explains how I found an XML External Entity (XXE) injection through a specially crafted PDF file.