> For the complete documentation index, see [llms.txt](https://oklencodes.gitbook.io/untitled/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oklencodes.gitbook.io/untitled/ctfs/devoops-ctf/exploiting-web-page.md). # Exploiting Web Page

So it wants us to upload the XML elements as, Author – Subject – Content

Writing the test XML to see if it will work

Using burpsuite to see the results. Immediately I noticed even though I wrote the file in txt, the site only wants it in XML So I change the filename and the context type within burpsuite – to “.xml” and “text/xml” ![](https://2022164620-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtzurpgroDJSMn9AFVmQP%2Fuploads%2FDe9aF4H5Ya9comxg1s07%2Fimage.png?alt=media\&token=25bc2a1c-aa7a-4557-9d21-d0cc9c9392fd)\ \ Now with those changes, the response I get from the website is “internal server error”

I try again but this time I put Author, Subject, Content in caps

Ok so knowing it accepts XML fine. I need to find a XXE injection template. I use the one Then I put my previous XML strings into it like so - ![](https://2022164620-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtzurpgroDJSMn9AFVmQP%2Fuploads%2FRRKJJdR9sCKARd1ByLIM%2Fimage.png?alt=media\&token=e4f50f39-cc01-4ae1-befb-08f8c98c10fd)
had to remove the “#” from Any as I think it was blocking it. Added numbers at the end of author and content to specify they are different lines. Line 22 was using a system call to grab the contents of [file:/etc/passwd](file:///etc/passwd) and assign it into the variable file. Then we called that variable “file” in line 25 And it worked, once I sent that, I was greeted with a different response.