/
web app pentesting
/
xxe injection
Menu
XXE Injection
XML entities
What is XXE?
How do XXE vulnerabilities arise?
Types of XXE and How to Test Them
Exploiting XXE to retrieve files
Exploiting XXE to perform SSRF attacks
What is blind XXE?
Detecting blind XXE using out-of-band (OAST) techniques
Exploiting blind XXE to exfiltrate data out-of-band
Exploiting blind XXE to retrieve data via error messages
Exploiting blind XXE by repurposing a local DTD
Finding hidden attack surface for XXE injection
XInclude attacks
XXE attacks via file upload
XXE attacks via modified content type
How to prevent XXE vulnerabilities
