Blind XXE attacks – Out of band interaction Techniques (OAST) to exfilterate data
The post covers various techniques by which sensitive data can be exfilterated using out of band interaction in XXE
1 Comment
April 24, 2021
XXE Simplified: The concept, Attacks and Mitigations
XXE remains amongst the one with a critical score on the severity perspective. Why? Being able to read server's sensitive files is where the victim can be fully compromised.
April 14, 2021
Aragog Hackthebox walkthrough
Aragog is a medium level linux machine from hackthebox. Initial foothold is based on exploiting XXE and the privilege escalation requires to log the password by creating a backdoor.
July 21, 2020