XML

Web Exploitation

XXE Attacks: Exploiting XML External Entities for File Disclosure and Blind OOB Exfiltration

A practical guide to XML External Entity attacks — DOCTYPE abuse, file disclosure, SSRF, blind/OOB exfiltration, and defense.