XMLmao - XPath Challenge 4 - Love is Blind





You must perform an XPath injection attack in a string field where no results are shown.

Your objective is to pull the social security numbers from the XML document.
PARAMETERS:
Injection Type - String value in condition
Sanitization - None
Output - Boolean results, no errors, query not shown
Injection String: