Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dojo challenge #42 - Hex Color Palette winners & writeup

Summary

Dojo #42 'Hex Color Palette' writeup: exploiting an XXE in the lxml library via error-based exfiltration to leak /tmp/flag.txt; winners 0necloud, Cryptocat and 3c4d.
Published
Collected

original ↗

Related coverage

back