webmedium

XXE read

spbctf

Task: Web application accepts XML data and parses it. Solution: Exploited XXE vulnerability by injecting external entity to read /etc/flags file.

$ ls tags/ techniques/
lfifile_readxxexml
xxe_file_readexternal_entity_injection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]