Technique
technique:xml_stanza_injection
Also: stanza injection
Sending crafted XML stanzas through Kik so receiving clients process code that can alter chat behavior.
Sending crafted XML stanzas through Kik so receiving clients process code that can alter chat behavior.
“he could essentially inject a stanza of code into the chat”
“send a stanza through the XML system”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | modified Kik client | Explicit | 93 |
modified Kik client USES XML stanza injection
Azrael's custom Kik client could send raw XML stanzas, injecting code into chats for other Kik clients to process.
Explicit Confidence 98% · Azrael EP 93 Details
“I can send raw XML files which are stanzas”