4 ms·

Also there's a possibility of processing embedded links which point at your internal network. "How did this HTTP GET go through to my 'firewalled' PHPmyadmin s

Also there's a possibility of processing embedded links which point at your internal network. "How did this HTTP GET go through to my 'firewalled' PHPmyadmin site?" You have to treat all user input as if it's toxic.

fleitz 13y ago
Brilliant! I wonder what kind of error messages LibreOffice embeds when it can't fetch a resource... could map out the internal network pretty quickly if it has distinct error messages. Also docx files are zip files which opens the possibility of a zipbomb. I wonder if LibreOffice has protection for zipbombs.
- chc 13y ago
  Don't you need recursive decompression to make a zip bomb go off?
  - fleitz 13y ago
    Kinda... for 42.zip the first layer alone is 68GB albeit the final layer is 4.5 PB. It wouldn't surprise me one could engineer a docx bomb that would consume gigs of memory.
badman_ting 13y ago
That's what I was thinking too. The only thing is that this process is running on an AWS instance, so it would have to be on Dropbox's VPN or something to have any such access. Either serendipitously or intentionally, I hope these boxes don't have any connection to anything sensitive.