📙
AppSec
search
Ctrlk
  • Overview
  • Write Ups Compilations/Resources
  • Main Resources
  • Labs
  • Cross Site Request Forgery
    • Cross Site Request Forgery (CSRF)chevron-right
  • Missing Access Controls
    • Missing Access Controlschevron-right
  • LFI / Directory Traversal
    • Local File Inclusionchevron-right
  • XXE
    • XML External Entity (XXE)chevron-right
      • Write-ups
      • Source Code Examples
      • Labs
      • More Writeups
      • Payloads
      • Resources
  • Injection
    • Command Injectionchevron-right
    • Server-Side Template Injectionchevron-right
    • SQL Injectionchevron-right
  • SSRF
    • Server-Side Request Forgery (SSRF)chevron-right
  • Unvalidated Redirects and Forwards
    • Unvalidated Redirects and Forwardschevron-right
  • Verbose Error Messages and Stack Traces
    • Verbose Error Messages and Stack Traceschevron-right
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. XXEchevron-right
  2. XML External Entity (XXE)

Labs

LogoLab: Exploiting XXE using external entities to retrieve files | Web Security AcademyWebSecAcademychevron-right
LogoLab: Exploiting XXE to perform SSRF attacks | Web Security AcademyWebSecAcademychevron-right
LogoLab: Exploiting XInclude to retrieve files | Web Security AcademyWebSecAcademychevron-right
LogoLab: Exploiting XXE via image file upload | Web Security AcademyWebSecAcademychevron-right

PreviousSource Code Exampleschevron-leftNextMore Writeupschevron-right

Last updated 4 years ago

Was this helpful?

Was this helpful?