srl
PDF Generators
Many web applications provide a PDF generation functionality which may contain dynamic user input.
Some of these generators may be vulnerable due to HTML injection, allowing several attacks.
PDF Library Enumeration Determining the PDF generation library used by a web application may be pretty easy: most of them add information in the metadata of the generated file such as the library name and version.
To display the metadata of a PDF file, there are multiple options: