XMLmao - XPath Challenge 3 - Looking Through a Keyhole





You must perform an XPath injection attack in a string field. Only one value is returned.

Your objective is to pull the social security numbers from the XML document.
PARAMETERS:
Injection Type - String value in condition
Sanitization - None
Output - One result, generic errors, query not shown
Injection String: