[bckslsh]

Nice tutorial man :). Way better than mine haha.

I had never seen any tutorials using updatexml() :)

[bckslsh]

Yeah, it's pretty hard to find info on it. Sorry I didn't use the site you gave me, it was string based and I didn't want to confuse anyone. Plus my goal was to find an admin login, since that's the main attraction around here, and I would have had to get it from a different database (even more confusing to beginners).

Thanks for the idea though, have fun reading. I'm sure you'll have XPath down in no time :3

I'm fine with extractvalue() haha, updatexml() looks very similar.

[kakker]

great tutorial tyvm :)
keep it up!!!

[mirkops]

Great tuto..thanks a lot dear...it is possible to use for version<5 too??

[mirkops]

One question else...how can we recognize one web vulnerable for this method?? thanks advance

[mirkops]

No I say how we can recognize for use this method...maybe when all another methods doesn't work???

[.Satan]

Another amazing tut by downfall ^^
nice work! i will try it out soon

[Pen and Paper]

finally a tutorial. i found alot types of this injection and i couldn't exploit. now i know :D

ty

[mabbylish]

Thanks for the tutorial ,and i was wondering when can i use XPath Injection ? and how can i tell it ?

[root_Hak42]

@Downfall - Could of used this like a month ago as I recently learned this method for injection!!! Good share.

[Cyber_Space_Warrior]

updatexml() huh! thats new to me , thanks a lot bro!!!

[Diabolis]

Thanks for the tut man, I'm trying to do what BeggFoMercy's doing, and so far its going really well.

This clears up quite a few things as far as updatexml() goes, I 'kept seeing sites (the few that explained it) trying to use different syntaxes for using it. Needless to say, that got a bit confusing after a while.

Great work man, looking forward to seeing new stuff from you 🤝

[Diabolis]

No problem, thanks for the reply. I was thinking of making a tutorial on SQL Injecting vulnerable vBulliten forums, but I wasn't sure if anyone would be interested in it..

Lol, I'd be interested. Anything that has to do with learning more about vandalizing the web, I'm all for learning 😏

And I just noticed, thanks for the +rep, man ✌

[noober1001]

very very helpful tutorial bro.
Thank you so much for sharing this.
Keep it up.

[Th3PonyWizard]

A truly HQ tutorial. One question though, does someone have some kind of Google dork for finding an XPATH injection? Cuz, it will be tricky to remember when exactly I will be required to use it. Oh well, thanks anyway