IntermediateFREE14 hours
XML External Entity (XXE) Injection
// VULNERABLE: XXE via DTD + external entities enabled (libxml)
Enroll for free to track your progress through this course.
Curriculum (28 lessons)
- 1. XML External Entity (XXE) Injection
- 2. What Is XML External Entity Injection?
- 3. How Do XXE Vulnerabilities Arise?
- 4. What Are the Types of XXE Attacks?
- 5. Exploiting XXE to Retrieve Files
- 6. Exploiting XXE to Perform SSRF Attacks
- 7. Blind XXE Vulnerabilities
- 8. Finding Hidden Attack Surface for XXE Injection
- 9. How to Find and Test for XXE Vulnerabilities
- 10. How to Prevent XXE Vulnerabilities
- 11. XML Entities
- 12. What Is XML?
- 13. What Are XML Entities?
- 14. What Is Document Type Definition?
- 15. What Are XML Custom Entities?
- 16. What Are XML External Entities?
- 17. What Is a Blind XXE Attack? Tutorial & Examples
- 18. Offensive Insight
- 19. Defensive Insight
- 20. Finding and Exploiting Blind XXE Vulnerabilities
- 21. What Is Blind XXE?
- 22. Detecting Blind XXE Using Out-of-Band (OAST) Techniques
- 23. Exploiting Blind XXE to Exfiltrate Data Out-of-Band
- 24. Exploiting Blind XXE to Retrieve Data via Error Messages an Alternative Approach to Exploi
- 25. Exploiting Blind XXE by Repurposing a Local DTD
- 26. Best Practices & Detailed Takeaways
- 27. VULNERABLE Python Lxml
- 28. XML External Entities (XXE)