Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

XSS to XXE in Prince v10 and below- 144

Corben LeoPosted 6 Years Ago
  • Prince is a software that converts HTML, XHTML and several other formats to PDF's.
  • The XML parsing library allows External Entities to be loaded. Because of this, it is vulnerable to XXE.
  • The XXE vulnerability can be used for SSRF and/or read files on the current OS.