41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a087e3-ecb3-70e2-9564-2bd6d4e28863

A Tale of Two Formats: Exploiting Insecure XML and ZIP File Parsers to Create a Web Shell

spaceraccoon.dev · published 18 February 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at spaceraccoon.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 6
Words captured: 1,802

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://owasp.org/www-community/vulnerabilities/XML_External_Entity_%28XXE%29_Processing

owasp.org

Remote Code Execution in Three Acts: Chaining Exposed Actuators and H2 Database Aliases in Spring Boot 2 Read at the source ↗

spaceraccoon.dev

https://snyk.io/research/zip-slip-vulnerability

snyk.io

https://github.com/ptoomey3/evilarc

github.com

https://labs.spotify.com/2019/09/12/reflections-on-the-last-two-years-of-spotifys-bug-bounty-program/

labs.spotify.com

https://rubyonrails.org/doctrine/

rubyonrails.org