+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: XML Injection POC (/showthread.php?tid=5936757)
XML Injection POC - ernestmiller - Feb 2, 2019
Wanted to know how to validate quickly whether an XML injection is a false positive or not.
For example if Burpsuite throws up some XML injections that are possble.
Obviously you would at first check the HTTP Headers of the request and check if the website really is parsing or Accepting XML to begin with
RE: XML Injection POC - Most annoying process - Feb 4, 2019
Feel free to PM me for help with this. I have experience.
RE: XML Injection POC - frank3nstien - Feb 4, 2019
XML and XPath false positives when it finds certain strings (e.g. xmlschema, ajaxpath) in the the response of burp scans, but it does not consider when those same strings were already present in the original response to unaltered requests.