Category XXE

blog
2+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

XXE blog

Filters

  • SVG XSS and XXE: Attack via Image Upload
    web hacking

    SVG XSS and XXE: Attack via Image Upload

    An uploaded SVG can execute scripts or read local files. A practical guide to XSS and XXE via SVG: real-world payloads, attack vectors, and mitigations for developers.

    Discover more Discover more
  • Injection Attack: A Complete Guide to Web Injections
    web hacking

    Injection Attack: A Complete Guide to Web Injections

    A complete guide to injection attacks: SQL injection, command injection, SSTI, XXE, LDAP, NoSQL, and other techniques, with examples, testing, and prevention.

    Discover more Discover more