About
Prerequisite: Complete [Core Vulnerability Exploitation](https://www.darkrelay.com/challenge-page/core-vulnerability-exploitation) before this module. That unit covers SQL Injection login bypass, IDOR, Stored XSS, path traversal, and CSRF on NeonVault. You will reuse the same Burp and HTTP request skills here when you move from input trust bugs into server-side fetch, XML parser, deserialization, and template injection flaws. In this module of the Web Application Pentester learning path, you move past the front-end and authorization layers to target the underlying application logic and execution environments. These advanced web vulnerabilities, Server-Side Request Forgery (SSRF), XML External Entities (XXE), Insecure Deserialization, and Server-Side Template Injection (SSTI), often require a deep understanding of the language runtime (like Java, Python, or PHP) and the surrounding microservice architecture. You will attack the NeonVault backend services. You will use SSRF to pivot through the external firewall and read cloud instance metadata. You will abuse an XML parser to exfiltrate local files via XXE. You will compromise a Python-based background worker by injecting a malicious Pickle serialization payload. Finally, you will abuse a Flask Jinja2 notification preview that concatenates user input into `render_template_string`, proving template injection through to file read on the web host. Upon completion of the module, students will be able to: - Identify and exploit Server-Side Request Forgery (SSRF) to bypass network perimeters. - Exploit XML External Entity (XXE) vulnerabilities for out-of-band data exfiltration. - Understand object serialization and exploit insecure deserialization for RCE on a background worker process. - Detect and exploit Server-Side Template Injection (SSTI) in Flask/Jinja2 to read sensitive files from the host. For inquiries, please write us at https://www.darkrelay.com/cybersecurity-course-inquiry