Recon-ng - XPath Brute Forcing Module (xpath_bruter)
Channel: Tim Tomes
Date: 2013-08-27

This video is a demonstration of the XPath brute forcing exploitation module from the Recon-ng framework. In this video I briefly discuss XPath injection and use a blind XPath injection vulnerability to enumerate the contents of a server side XML data store.