ThemeBleed Exploit Analysis (CVE-2023-38146)
ThemeBleed is a hot new exploit, and in this video, we'll take a look at a proof of concept exploit on GitHub to understand how it works and what it's doing. Check out the Aero box on HackTheBox to exploit this yourself.
HackTheBox Aero: https://www.hackthebox.com/machines/aero
Aero Blog Post: https://0xdf.gitlab.io/2023/09/28/htb...
☕ Buy Me A Coffee: https://www.buymeacoffee.com/0xdf
[00:00] Introduction
[00:24] ThemeBleed Overview
[01:17] Exploit README
[03:55] Data Directory
[04:18] Main function
[04:54] Create Themepack
[05:26] Create Theme
[06:02] Run Server
[07:15] Filter Filesystem
[08:48] Conclusion
#pentest #ctf #bugbounty