Pdfy Htb | Writeup Upd

Upload → server executes id and returns output embedded in PNG comment.

import sys import os

Output shows the internal API response: "status": "debug", "config": "SECRET_KEY = pdfy_s3cr3t_k3y_123" pdfy htb writeup upd

Browsing to the target IP on the assigned port reveals a small input box asking for a URL. Upload → server executes id and returns output