Category XXE Injection

blog
2+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

XXE Injection blog

Filters

  • XXE Injection (XML External Entity): file read, SSRF and RCE
    web hacking

    XXE Injection (XML External Entity): file read, SSRF and RCE

    XXE (XML External Entity) in pentesting: payload for file read, SSRF, Blind XXE OOB and RCE, testing with Burp Suite and Nuclei, prevention in XML parsers.

    Discover more Discover more
  • Advanced XXE Injection: XML parser, XInclude, SOAP and bypass
    web hacking

    Advanced XXE Injection: XML parser, XInclude, SOAP and bypass

    Advanced XXE Injection: Identifies XML parsers, compares Java, PHP, Python, and .NET, tests SOAP, XInclude, content-type switching, and targeted bypasses.

    Discover more Discover more