XML Entity Cheatsheet - Updated
An XML Entity testing cheatsheet. This is an updated version with nokogiri tests
removed, just (X)XE notes.
XML Declaration(s):
1
2
<?xml
Blackhat 2015 Arsenal
Last month at Blackhat Arsenal 2015, Pete [https://github.com/parzamendi-r7] and
I presented on Serpico. This was our second time at Arsenal. Yet again,
Simple Ruby Exec with Open and Pipe
I was researching something else and thought this was a cool way to execute a
command through the open method in ruby:
1
open("
Exploiting XXE Vulnerabilities in OXML Documents - Part 1
OXML is a common document format; think docx (Microsoft Word Document), pptx
(Microsoft Powerpoint), xlsx (Excel Spreadsheet), etc.
An OXML document is a zip file
ldapsearch notes
I seem to find open LDAP servers on the Internet more often than I should. Here
are some notes on using ldapsearch
Installing ldapsearch on