Discovering 0-days in HTML-to-PDF Generators (90 million monthly targets)
By Pedro "gankd" Cruz — Pentest Analyst and Vulnerability Researcher at Hakai Security. Almost every feature-rich application emits a PDF at some
RESEARCHER PROFILE
pedro cruz
PUBLISHED
4
ENTRIES
Descobrindo 0-days em Geradores HTML-to-PDF (90 milhões de alvos mensais)
* Por Pedro "gankd" Cruz — Pentest Analyst & Vulnerability Researcher na Hakai Security. Quase toda aplicação com diversas funcionalidades emite PDF em algum
![[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/02/artigo-pedro26.jpg)
[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing
Your automation script or pentest tool works perfectly in the lab. Requests flow, data returns. But the moment you hit the real target, the
[PT-BR] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing
Seu script de automação ou ferramenta de pentest funciona perfeitamente no laboratório. As requisições fluem, os dados retornam. Mas no momento em que você