Uncle Rat's XXE Handbook

Identify, exploit and prevent XXE vulnerabilities in web applications.

Join The Networkchuck ACADEMY

Unlock this course, plus access our library of 20+ courses and 1,200
lessons ($199 value) by joining as an Academy Member for $12/month today.

1. 2. Introduction
1. 3. What is XXE?
1. 4. XXE Entry points
1. 5. Exploiting XXE
1. 6. WAF and filter evasion
1. 7. Tools to find and how to prevent XXE
1. 8. Throwing it all together
2. Assignment 1: Let's talk XXE
1. 9. Labs: XXE
1. 10. XXE On the portswigger labs
2. 11. XXE Is so much more than just XML
3. 12. XXE Through DOCX
4. 13. Blind XXE and parameter Entities
5. 14. Chaining XXE into SSRF