En este post vamos a estar resolviendo el laboratorio de PortSwigger: “File path traversal, traversal sequences stripped non-recursively.
Directory traversal PractitionerEn este post vamos a estar resolviendo el laboratorio de PortSwigger: “File path traversal, sequences blocked with absolute path bypass.
Directory traversal PractitionerEn este post vamos a estar resolviendo el laboratorio de PortSwigger: “Exploiting blind XXE to retrieve data via error messages.
XML injection PractitionerEn este post vamos a estar resolviendo el laboratorio de PortSwigger: “Exploiting blind XXE to exfiltrate data using a malicious external DTD.
XML injection PractitionerEn este post vamos a estar resolviendo el laboratorio de PortSwigger: “Exploiting XXE via image file upload.
XML injection PractitionerEn este post vamos a estar resolviendo el laboratorio de PortSwigger: “Exploiting XInclude to retrieve files.
XML injection PractitionerEn este post vamos a estar resolviendo el laboratorio de PortSwigger: “Blind XXE with out-of-band interaction.
XML injection PractitionerEn este post vamos a estar resolviendo el laboratorio de PortSwigger: “Blind XXE with out-of-band interaction via XML parameter entities.
XML injection PractitionerEn este post vamos a estar resolviendo el laboratorio de PortSwigger: “Exploiting XXE using external entities to retrieve files.
XML injection ApprenticeEn este post vamos a estar resolviendo el laboratorio de PortSwigger: “Exploiting XXE to perform SSRF attacks.
XML injection Apprentice