beefproject / beefproject/beef
Add IE11 XXE to read local files
Open
Good First Issue
Low
Module
Suggestion
- Dominant language
- JavaScript
- Stars
- 11k
- Forks
- 2.4k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 15
Description
There seem to be a XXE vulnerability in IE 11 which allows to read every local file:
https://packetstormsecurity.com/files/152484/MICROSOFT-INTERNET-EXPLORER-v11-XML-EXTERNAL-ENTITY-INJECTION-0DAY.txt
would be nice to include this ;-)
Contributor guide
Research direction
No file, test, or entry point is named. Start by reading the linked IE11 XXE advisory and locating the project's existing browser-exploitation integrations; done would mean the requested IE11 XXE capability is included with a way to verify it.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100