Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
giga-a authored Dec 24, 2022
1 parent 17788b8 commit 0338ac9
Showing 1 changed file with 2 additions and 15 deletions.
17 changes: 2 additions & 15 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ A threat actor may alter the XML path language (XPath) query to read data on the
2. The target parses the malicious query (that contains expressions called a locator) and returns data from the database (XML document)

## Code
#### Target logic
#### Target-logic (db)
```xml
<users>
<user>
Expand All @@ -19,26 +19,13 @@ A threat actor may alter the XML path language (XPath) query to read data on the
</users>
```

#### Target-logic
```c#
# Code
...
String xpath_query = "//user[name/text()='" + get("name") + "' And pass/text()='" + get("pass") + "']";
...
```

#### Target-in
```
name: test
pass: P@ssw0rd!01
//String xpath_query = "//user[name/text()='test' And pass/text()='P@ssw0rd!01']";
```

#### Target-Out
```
Welcome, test!
```

#### Target-in
```
name: test' or 0=0 or 'a'='a
Expand Down

0 comments on commit 0338ac9

Please sign in to comment.