This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Seth Michael Larson
sethmlarson.dev
did:plc:lpx4s2ddgn54cocsxs7q3n4a
Finally, a comprehensive and technical breakdown of "The WebP Vulnerability" also known as BLASTPASS or CVE-2023-4863.
blog.isosceles.com/the-webp-0day/
"The lack of available technical information from the vendors here made verification challenging, ... mostly benefits attackers"
https://blog.isosceles.com/the-webp-0day/
2023-09-21T22:26:12.504Z