https://bokkapig.pages.dev/tags/xxe/Recent content in XXE on bokkapigHugoen-gbSat, 28 Mar 2026 00:00:00 +0000https://bokkapig.pages.dev/writeups/devarea/Sat, 28 Mar 2026 00:00:00 +0000https://bokkapig.pages.dev/writeups/devarea/Anonymous FTP exposed a Java SOAP service JAR; an MTOM XXE attack against the CXF endpoint leaked the Hoverfly admin password from a systemd unit file, then authenticated RCE via Hoverfly middleware yielded a shell as dev_ryan; privilege escalation exploited a world-writable /bin/bash by writing a SUID-creating wrapper triggered by a root-owned systemd timer.