Software Handy Base64 To Pdf Conversion Web App - Exfiltration Tip
This is a fast and easy base64 to pdf conversion web app. I recently had a target that I was looting over a few days and the devs were alerted and began fixing the insecurity in their api. this is something that happens with larger fintech companies forme usually. It's a good idea to poke around beforehand so you have another route incase you cant bypass their patch. I bypassed their first patch, but could not get around the second so I attacked a different end point and this was the first time i had seen this kind of data returned. I checked it out and realized the requests were returning the entire pdf file in base64
Everything between "fileContent":" and " is my pdf file.
so all we want is this
Now we convert that base64 back to its original pdf file format here
and get
Everything between "fileContent":" and " is my pdf file.
You do not have permission to view link
Log in or register now.
so all we want is this
You do not have permission to view link
Log in or register now.
Now we convert that base64 back to its original pdf file format here
You do not have permission to view link
Log in or register now.
and get
You do not have permission to view link
Log in or register now.