---
id: 5235
title: "XBOW Battles Ninja Tables: Who’s the Real Ninja?"
source_domain: xbow.com
source_url: "https://xbow.com/blog/xbow-ninja-tables"
published_at: "2024-08-14T12:00:00Z"
tags: ["bug-bounty", "arbitrary-file-read", "vulnerability-research", "web-security", "wordpress", "ninja-tables"]
phying_url: "https://phying.com/item/5235"
lang: en
---

# XBOW Battles Ninja Tables: Who’s the Real Ninja?

## Summary

XBOW's hunt for an arbitrary file read in the WordPress Ninja Tables plugin, from robots.txt and sitemap recon to locating a file-path-hungry endpoint on a live bug bounty target.

## Intelligence Metadata

- **Sources:** xbow.com
- **Published:** 2024-08-14T12:00:00Z
- **Original:** https://xbow.com/blog/xbow-ninja-tables
- **Phying News:** https://phying.com/item/5235