XSLT - Code execution

30 Points

eXtensible Stylesheet Language Transformations

Author

ghozt, 16 July 2017

Level

Validations

2078 Challengers 2%

Note

141 Votes

To reach this part of the site please login

5 Solutions

Display solutions Submit a solution

Challenge Results

Pseudo	Challenge	Lang	date
w1p30ut	XSLT - Code execution		28 September 2020 at 19:44
jiahao96	XSLT - Exécution de code		28 September 2020 at 14:07
KTN	XSLT - Code execution		28 September 2020 at 10:04
Mxtheux	XSLT - Code execution		28 September 2020 at 03:49
---	XSLT - Exécution de code		26 September 2020 at 20:23
Izeau	XSLT - Exécution de code		25 September 2020 at 23:44
stevejones	XSLT - Code execution		25 September 2020 at 15:46
raffy514	XSLT - Exécution de code		25 September 2020 at 05:27
CalvinGross	XSLT - Code execution		24 September 2020 at 16:33
BLurR	XSLT - Exécution de code		24 September 2020 at 14:50

64 Challenges

Results	Name	Validations	Number of points	Difficulty	Author	Note	Solution
	HTML - Source code	49% 93803	5		g0uZ		3
	HTTP - Open redirect	19% 34959	10		Swissky		10
	HTTP - User-agent	25% 46675	10		g0uZ		10
	Weak password	34% 64502	10		g0uZ		7
	PHP - Command injection	18% 33344	10		sambecks		10
	Backup file	17% 32473	15		g0uZ		7
	HTTP - Directory indexing	24% 45010	15		g0uZ		7
	HTTP - Headers	16% 30599	15		Arod		9
	HTTP - POST	13% 23470	15		Th1b4ud		10
	HTTP - Improper redirect	13% 23852	15		Arod		10
	HTTP - Verb tampering	15% 27088	15		g0uZ		10
	Install files	14% 26943	15		g0uZ		3
	CRLF	10% 18032	20		g0uZ		7
	File upload - Double extensions	11% 20411	20		g0uZ		9
	File upload - MIME type	9% 15974	20		g0uZ		9
	HTTP - Cookies	14% 25569	20		g0uZ		7
	Insecure Code Management	3% 4617	20		Swissky		6
	JSON Web Token (JWT) - Introduction	3% 5146	20		Kn0wledge		4
	Directory traversal	11% 20852	25		g0uZ		3
	File upload - Null byte	8% 14488	25		g0uZ		4
	JSON Web Token (JWT) - Weak secret	2% 3573	25		Jrmbt		5
	JWT - Revoked token	1% 868	25		ArnC		6
	PHP - assert()	5% 8599	25		Birdy42		9
	PHP - Filters	7% 12592	25		g0uZ		3
	PHP - register globals	6% 10431	25		g0uZ		1
	PHP - Remote Xdebug	1% 353	25		mayfly		2
	File upload - ZIP	3% 5202	30		ghozt		3
	Command injection - Filter bypass	3% 3933	30		sambecks		6
	Java - Server-side Template Injection	4% 6026	30		righettod		4
	JSON Web Token (JWT) - Public key	1% 1474	30		Jrmbt		4
	Local File Inclusion	9% 15940	30		g0uZ		4
	Local File Inclusion - Double encoding	5% 7763	30		zM_		3
	PHP - Loose Comparison	3% 4106	30		ghozt		4
	PHP - preg_replace()	4% 5908	30		sambecks		4
	PHP - type juggling	3% 5741	30		vic		4
	Remote File Inclusion	4% 6956	30		g0uZ		8
	SQL injection - Authentication	13% 23857	30		g0uZ		11
	SQL injection - Authentication - GBK	3% 5235	30		dvor4x		3
	SQL injection - String	6% 11064	30		g0uZ		8
	XSLT - Code execution	2% 2078	30		ghozt		5
	LDAP injection - Authentication	4% 6261	35		g0uZ		8
	NoSQL injection - Authentication	3% 4779	35		mastho		8
	PHP - Path Truncation	2% 3577	35		Geluchat		4
	PHP - Serialization	3% 4355	35		Arod		2
	SQL injection - Numeric	5% 8149	35		g0uZ		6
	SQL Injection - Routed	2% 2581	35		soka		5
	SQL Truncation	3% 3875	35		Geluchat		2
	XML External Entity	2% 2982	35		sambecks		2
	XPath injection - Authentication	3% 4540	35		g0uZ		6
	Java - Spring Boot	1% 1385	40		dvor4x		2
	Local File Inclusion - Wrappers	2% 1931	40		sambecks		4
	PHP - Eval	1% 1733	40		chmod		9
	PHP - Unserialize overflow	1% 228	40		mayfly		2
	SQL injection - Error	3% 4137	40		sambecks		4
	SQL injection - Insert	1% 1723	40		sambecks		3
	SQL injection - File reading	2% 3168	40		Arod		3
	XPath injection - String	2% 2568	40		g0uZ		5
	NoSQL injection - Blind	1% 1777	45		ghozt		5
	SQL injection - Time based	2% 3008	45		ycam		4
	Server Side Request Forgery	1% 728	50		sambecks		6
	SQL injection - Blind	3% 4386	50		g0uZ		5
	LDAP injection - Blind	1% 1917	55		g0uZ		2
	XPath injection - Blind	1% 1331	75		g0uZ		4
	SQL injection - Filter bypass	1% 1347	80		sambecks		5