https://zacharymorgan.dev/tags/xslt-injection/ Recent content in Xslt-Injection on Zachary Morgan Hugo en-us Sun, 24 May 2026 16:00:00 -0600 https://zacharymorgan.dev/posts/day-32-footprinting-and-a-box/ Sun, 24 May 2026 16:00:00 -0600 https://zacharymorgan.dev/posts/day-32-footprinting-and-a-box/ <p>It&rsquo;s May 24th. The last time I touched my OSCP prep was May 8th. Sixteen days lost, first to a brutal exam week, then to whatever virus knocked me flat for a week.</p> <h2 id="what-i-did-today">What I did today</h2> <p>Four HTB Academy Footprinting modules: SMTP, IMAP/POP3, SNMP, and MySQL. Then I rooted Conversor on Hack The Box, an easy retired machine that turned out to be a fun XSLT injection foothold into a needrestart CVE-2024-48990 privesc.</p>