[macavitysworld]

Hmm thanks for sharing ...
Wondering why there is needed intermediate step like a index.html, why you cannot just go to http://SERVER_IP/flag.php?x=/etc/passwd
why it should be used in iframe, I know that it"s not work, but why ?

https://exploit-notes.hdks.org/exploit/w...opdf-ssrf/
Detailed writeup: https://medium.com/@Pdaysec/htb-pdfy-cha...0e678bd521

[slukl]

A CC is needed:
ERROR: failed to start tunnel: You must add a credit or debit card before you can use TCP endpoints on a free account. We require a valid card as a way to combat abuse and keep the internet a safe place. This card will NOT be charged.

[macavitysworld]

A CC is needed:
ERROR:  failed to start tunnel: You must add a credit or debit card before you can use TCP endpoints on a free account. We require a valid card as a way to combat abuse and keep the internet a safe place. This card will NOT  be charged.

Huh, I dont know now it's required or not. While the time when I did the challenge cc was not necessary for ngrok.

[slukl]

A CC is needed:
ERROR:  failed to start tunnel: You must add a credit or debit card before you can use TCP endpoints on a free account. We require a valid card as a way to combat abuse and keep the internet a safe place. This card will NOT  be charged.

Huh, I dont know now it's required or not. While the time when I did the challenge cc was not necessary for ngrok.

Just wanted to mentioned it. After that you can delete the cc again but might be still stored somewhere?!?!

Nevertheless great work ++rep given long ago <3