当前位置：网站首页>Buuctf entry diary -- [nctf2019]fake XML Cookbook

Buuctf entry diary -- [nctf2019]fake XML Cookbook

2022-07-22 21:10:00 【Breeze--】

Enter the page :

The old problem has been made again , Want to explode again username and password, A lot of time has been wasted , This is not here at all

Let's look at the page source code , Found a php file

Let's visit

It's as simple as entity injection ;

Will be our first page

Grab a bag

Back to XML Grab it where you inject it and send it to repeater Convenient test

success , Now it's construction XML Injected packets

But this flag I tried many paths , Just tried it out

版权声明
本文为[Breeze--]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/203/202207221052449360.html