XSLT-Injection_reverse-shell

KO | EN

gitlite — search

#react #llm #go #deep-learning #linux #nodejs #awesome #kubernetes #vue #awesome-list #security #ios #openai #open-source

XSLT-Injection_reverse-shell

(★ 14)

Demonstration of advanced exploitation using XSLT injection to achieve a reverse shell.

XSLT-Injection_reverse-shell 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# XSLT Injection - Technical Analysis

## 🔍 What is XSLT Injection?

XSLT (Extensible Stylesheet Language Transformations) is a language for transforming XML documents. XSLT injection occurs when an application allows an attacker to control or modify XSLT stylesheets that are executed on the server.

## ⚡ Exploitation Mechanism

### Main Vector: exsl:document
The specific vulnerability exploited by this project is the abuse of the EXSLT `exsl:document` extension, which allows files to be written during the XSLT transformation process.

### Attack Flow
1. **Injection**: Malicious XSLT is provided to a vulnerable processor
2. **File Write**: `exsl:document` writes arbitrary files to the system
3. **Execution**: The written files can be executable scripts
4. **Access**: A reverse shell connection is established

## 🛠️ Necessary Conditions

For this attack to work, the environment must have:

- XSLT processor with support for EXSLT extensions
- Write permissions in the file system
- Ability to execute the created files
- No validation of XSLT inputs

## 🎯 Potential Impact

- **Remote command execution** (RCE)
- **Reverse shell** on the server
- **Arbitrary writing** of files
- **Complete compromise** of the system

---

*Project for educational purposes in controlled environments*

XSLT-Injection_reverse-shell

XSLT-Injection_reverse-shell 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

XSLT-Injection_reverse-shell

XSLT-Injection_reverse-shell 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README