2 Videos for XML Attacks 02
This video requires PentesterLab PRO
GO PRO
XML 02
In this video, we cover the XML 02 exercise, which focuses on XPath injection, a technique similar to SQL injection but with different syntax. By exploiting XPath, we demonstrate how to bypass authentication and retrieve sensitive information.
This video requires PentesterLab PRO
GO PRO
XML 02: Code Review
In this video, we cover the challenge XML 02 as part of the Essential Badge. We review a PHP code snippet that processes XML data and identify vulnerabilities related to unsanitized user inputs in XPath expressions.