Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Where you should disclose your vulnerabilities. Go read RFPolicy if you want to do responsible disclosure, and go here for when all else fails. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
XPath Injection on PHP?
Posted by: the_master
Date: September 20, 2010 12:20AM

Hi guys,
somebody can tell me how I illustrates XPath Injection Attack on PHP?
Thanks,

Options: ReplyQuote
Re: XPath Injection on PHP?
Posted by: Reiners
Date: January 06, 2011 03:13PM

Here is a walkthrough for a xpath injection challenge
http://www.rs-labs.com/papers/i64-reto_IV-solve.txt
(hint: google translate)

there was also a similar challenge at rootedCON ctf, writeups here:
http://j.mp/eMwIbR

that should be all you need to learn xpath injection attacks.
(wrong forum btw ;))

Options: ReplyQuote
Re: XPath Injection on PHP?
Posted by: Coded32
Date: May 28, 2013 05:04AM

also, DVWA, WebGoat and the new OWASP Security Shepherd.

Options: ReplyQuote


Sorry, only registered users may post in this forum.