ImmersiveLabs1 min read
IML - XML External Entity Injection
XML External Entity Injection - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.
IML - XML External Entity Injection#
- Copy the contents of the xml
- Create file and paste the xml data in. Then add the:
bash
<!DOCTYPE store[<!ENTITY signature SYSTEM "file:///tmp/token.txt" >]>to the top
- Make sure the name next to DOCTYPE correlates with the name in the xml script ie. store
- Add the variable &signature; somewhere in the script
- Upload file and choose from dropdown list
Related articles
ImmersiveLabs2 min
IML - Offensive Cyber Range: Artica Shipping Company
Offensive Cyber Range Artica Shipping Company - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.
- ftp
- nmap
- privilege escalation
- python
- rce
ImmersiveLabs1 min
IML - Cross-Site Scripting: Ep.6 – Further Exploitation
Cross-Site Scripting Ep.6 – F - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.
- privilege escalation
- python
- rce
- tryhackme
- hackthebox
ImmersiveLabs2 min
IML - Kerberos: Ep.13 – Demonstrate your skills
Kerberos Ep.13 – Demonstrate your skills - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.
- hashcat
- john the ripper
- kerberos
- mimikatz
- powershell