zack0x01/XSS.pdf-Credential-Harvesting-PDF: pDF-XSS PoC (credential theft via PDF form submission)
A minimal, reusable proof-of-concept showing stored XSS in a PDF viewer, where an uploaded PDF executes JavaScript, prompts for credentials, stores them in hidden form fields, and exfiltrates them via...
Continue Reading