Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] XXE levels don't create solution file when opened #654

Open
ismisepaul opened this issue May 26, 2022 · 1 comment
Open

[BUG] XXE levels don't create solution file when opened #654

ismisepaul opened this issue May 26, 2022 · 1 comment
Labels

Comments

@ismisepaul
Copy link
Member

Describe the bug
When you open the XXE levels from Admin -> Module Management -> Open and Close Modules the level solution file is not created.

To Reproduce
Steps to reproduce the behavior:

  1. Log in with admin
  2. Admin -> Module Management -> Open and Close Modules
  3. Open an XXE level
  4. Check file system - the solution file with the key is not created

This also is observed in by Category.

Expected behavior
The solution files are created on the filesystem when its opened from this.

@ismisepaul ismisepaul added the Bug label May 26, 2022
@ismisepaul
Copy link
Member Author

ismisepaul commented May 31, 2022

As a work around (when you only have access to the app and not the filesystem) when you have a set number of levels open and you want to create the file

  • Go Admin -> Module Management -> Open and Close Modules
  • Select all the "To Close", copy them and store them somewhere (if something goes wrong and you need a record of what you had open)
  • Unselect the "To Close"
  • Select all "To Open" (these are the ones you'll want to close)
  • Use an HTTP Proxy, you don't want to send this request through so have intercept on!
  • With intercept on in the proxy click "update module status"
  • Send the request to the repeater and edit it so that the "toClose" are now "toOpen"
  • Drop the request in the proxy
  • Refresh the page and click the checkbox "Enable Unsafe Levels" and Open Web App Levels Only
  • Go to the repeater and send the request (make sure you've modified all "toOpen" to "toClose"
  • You'll now have all the levels you had open at the beginning of this but also the files for XXE will be created

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant