2 Videos for XML Attacks 02

Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
XML 02
In this video, we cover the XML 02 exercise, which focuses on XPath injection, a technique similar to SQL injection but with different syntax. By exploiting XPath, we demonstrate how to bypass authentication and retrieve sensitive information.

Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
XML 02: Code Review
In this video, we cover the challenge XML 02 as part of the Essential Badge. We review a PHP code snippet that processes XML data and identify vulnerabilities related to unsanitized user inputs in XPath expressions.