killchain-compendium/exploit/web/xpath.md

XPATH injection

• Similar to SQL injection, it is a input/parameter injection

• payloads all the things XPATH

• Use lanfran's payload list as burpsuite sniper payload