Kasım 8, 2018 – Annanowa

8Kas

Exfiltration through FTP using XXE on a Tomcat server

I’m trying to extract binary data from a Tomcat server that is using SAXParser. For my FTP server, I am using this source. I’m hosting two DTD’s on Github Gist. These are their contents:

Base XML (What gets sent to the server):

<?xml …

Çağlar Arlı - 36 Views

8Kas

How does this simple buffer overflow work?

I’ve got this simple code

vuln.c

#include <stdio.h>
#include <string.h>

int main(int argc, char** argv)
{
char buffer[500];
strcpy(buffer, argv[1]);
printf(“%s”, buffer);
return 0;
}

I am trying to perform …

P	S	Ç	P	C	C	P
			1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30

Annanowa

Daily Archives: Kasım 8, 2018

Exfiltration through FTP using XXE on a Tomcat server

How does this simple buffer overflow work?

Son Yazılar

Son Yorumlar