killchain-compendium/Exploits/Web/XPath.md

XPATH injection

• Similar to SQL injection, it is a input/parameter injection

• payloads all the things XPATH

• Use lanfran's payload list as burpsuite sniper payload