Pasindu's Blog

Home

❯

PortSwigger Labs

❯

XML External Entity (XXE) Injection

XML External Entity (XXE) Injection

Jun 27, 20261 min read

XML External Entity (XXE) Injection - PortSwigger Practice Lab



6 items under this folder.

  • Jul 05, 2026

    Exploiting XInclude to retrieve files

    • PortSwigger
  • Jul 05, 2026

    Exploiting XXE to perform SSRF attacks

    • PortSwigger
  • Jul 05, 2026

    Exploiting XXE to retrieve data by repurposing a local DTD

    • PortSwigger
  • Jul 05, 2026

    Exploiting XXE using external entities to retrieve files

    • PortSwigger
  • Jul 05, 2026

    Exploiting XXE via image file upload

    • PortSwigger
  • Jul 05, 2026

    Exploiting blind XXE to retrieve data via error messages

    • PortSwigger

Created with Quartz v4.5.2 © 2026

  • GitHub
  • Discord Community