webPromedium
Lab 333 — LeadForge — XPath Injection in Contact Search
hackadvisor
Task: CRM platform with contact search endpoint that interpolates user input into XPath expressions against an XML data store. Solution: Boolean-based blind XPath injection to enumerate XML structure, locate flag in /leadforge/system_config/config[7]/value, and extract it character-by-character using substring().
$ ls tags/ techniques/
decoy_flag_identificationxpath_injectionboolean_based_blind_extractionxml_structure_enumerationsubstring_extraction
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Lab 335 — LeadForge — XPath Injection in XML-Based CRM— hackadvisor
- [web][Pro]Lab 330 — AuthVault — Blind LDAP Injection in Directory Lookup— hackadvisor
- [web][Pro]Lab 79 — LeadStream — Blind SQL Injection via Excel Bulk Import— hackadvisor
- [web][Pro]LeadVault— hackadvisor
- [web][Pro]Lab 373 — PipelineIQ — Django ORM Filter Injection— hackadvisor