Scribd Logo
Upload

Welcome to Scribd!

  • IAW301 SE161501 Lab5

    Uploaded by

    Le Trung Son (K16HCM)
    2 views9 pages
    This document discusses exploiting XML external entity (XXE) injection vulnerabilities to retrieve local files, perform server-side request forgery (SSRF) attacks, and use XInclude to access files by abusing XML parsers that allow external entity references. It also covers using XXE through image file uploads.

    Original Description:

    Original Title

    IAW301_SE161501_Lab5

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document discusses exploiting XML external entity (XXE) injection vulnerabilities to retrieve local files, perform server-side request forgery (SSRF) attacks, and use XInclude to access files by abusing XML parsers that allow external entity references. It also covers using XXE through image file uploads.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    2 views9 pages

    IAW301 SE161501 Lab5

    Uploaded by

    Le Trung Son (K16HCM)
    This document discusses exploiting XML external entity (XXE) injection vulnerabilities to retrieve local files, perform server-side request forgery (SSRF) attacks, and use XInclude to access files by abusing XML parsers that allow external entity references. It also covers using XXE through image file uploads.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 9

    XML external entity (XXE) injection

    Lab: Exploiting XXE using external entities to retrieve files


    Lab: Exploiting XXE to perform SSRF attacks
    Lab: Exploiting XInclude to retrieve files
    Lab: Exploiting XXE via image file upload

    You might also like