PicoCTF - SOAP

26 Apr 2023 picoCTF

Challenge

The web project was rushed and no security assessment was done. Can you read the /etc/passwd file?

Launch Instance 後，進入網站點選其中一項 detail，發現網站 POST 網址 http://saturn.picoctf.net:56031/data，要求酬載如下：
```
  <?xml version="1.0" encoding="UTF-8"?><data><ID>1</ID></data> 
```
所以我們的 xml injection 如下：
Headers Body
將請求送出後，可以在 response 找到我們的 flag！

solidity picoCTF Go ethernaut linux leetcode blockchain sql react leetcode-top-interview array medium typescript smart-contract solana javascript java ethereum easy css Linux zsh ubuntu two-pointer next.js jekyll http hardhat golang ethers Secureum Rust web wallet vscode typeorm truffle stack shell rpc notion notes nodejs nextjs mocha html github git geth express eslint docker cloudflare Vim DSA