Tag feed

#xxe

14 posts2 followers

Explore Hashnode

Alternatives

Trending tags this week

TBTaha Benahmaditahaben.hashnode.devMar 10 · 3 min read

XXE Article

XXE Definition XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server fi...

0

STSieu Tran Quocblogs.night-wolf.ioOct 1, 2025 · 7 min read

Lỗ hổng XXE trong thư viện Dcm4che: Thư viện xử lý DICOM trong lĩnh vực y tế

I. Giới thiệu về DICOM DICOM (Digital Imaging and Communications in Medicine) là một chuẩn quốc tế được sử dụng rộng rãi trong ngành y tế để lưu trữ, truyền tải và xử lý hình ảnh y khoa như X-Quang, MRI, CT scan, siêu âm,… Chuẩn này còn định nghĩa gi...

0

IAIdo Abramovid0xa.hashnode.devJul 11, 2025 · 3 min read

HackTheBox - Web Attacks - Skills Assessment Walkthrough

Scenario You are performing a web application penetration test for a software development company, and they task you with testing the latest build of their social networking web application. Try to utilize the various techniques you learned in this m...

0

YYuvaSecyuvasec.hashnode.devApr 17, 2025 · 4 min read

The Billion Laughs Bomb

Introduction XML External Entity (XXE) attacks are not just theoretical, they're dangerously real. If your application processes XML in any way, API, file upload, or SOAP, you may already be vulnerable. And many developers don’t even know it. In this...

0

SNsanket narawadexxe.hashnode.devApr 12, 2025 · 3 min read

External Entity Injection (XXE)

What is XXE ? , What are the different types of XXE ? ,Different areas in the application can find XXE?, Bypasses , What are the vulnerability chain with XXE ?, What is there impact and mitigation ? Defination It is a vulnerability where allow an att...

0

JJebitoksharonjebitok.comJan 11, 2025 · 1 min read

The Advent of Cyber: Day 5: XXE - SOC-mas XX-what-ee? (TryHackMe)

In this article, we’ll cover the XXE - SOC-mas XX-what-ee? write-up as the Day 5 challenge of the Advent of Cyber event challenge. It was interesting to navigate Web Security for an e-commerce gifting site using PortSwigger’s XML external entity (XXE...

0

MRMohanraj Rbinarysouljour.meDec 5, 2024 · 4 min read

CVE-2024-46455 : XML eXternal Entity vulnerability in unstructured.io <= 0.14.2

Before proceeding I would like to give a shoutout to my awesome friend and colleagueMohit Kwho tagged along in this journey and played a pivotal role. Summary This blog is a result of the applied vulnerability research that we did against open-webui...

0

OJOhekpeje Joel Odeyjoelodey.hashnode.devNov 8, 2024 · 2 min read

Lab: Exploiting XXE to perform SSRF attacks

Lab Scenario: Our mission is to exploit XXE through a web application's "Check stock" feature, ultimately performing SSRF attacks to access sensitive information from a metadata endpoint. By intercepting and manipulating a POST request, we intend to ...

0

OJOhekpeje Joel Odeyjoelodey.hashnode.devApr 29, 2024 · 2 min read

Lab: Exploiting XXE using external entities to retrieve files

Lab Scenario: Our mission is to exploit XXE through a web application's "Check stock" feature, specifically using external entities to retrieve files. By intercepting and manipulating a POST request, we intend to use XXE to trigger the retrieval of s...

0

OJOhekpeje Joel Odeyjoelodey.hashnode.devApr 16, 2024 · 2 min read

Lab: Exploiting XInclude to retrieve files

Lab Scenario: Our mission is to exploit XInclude through a web application's "Check stock" feature. By intercepting and manipulating a POST request, we intend to use XInclude to retrieve files from the server. Let's proceed with the solution: Interc...

0

#xxe

Search Hashnode

#xxe

Explore Hashnode

Trending tags this week

XXE Article

Lỗ hổng XXE trong thư viện Dcm4che: Thư viện xử lý DICOM trong lĩnh vực y tế

HackTheBox - Web Attacks - Skills Assessment Walkthrough

The Billion Laughs Bomb

External Entity Injection (XXE)

The Advent of Cyber: Day 5: XXE - SOC-mas XX-what-ee? (TryHackMe)

CVE-2024-46455 : XML eXternal Entity vulnerability in unstructured.io <= 0.14.2

Lab: Exploiting XXE to perform SSRF attacks

Lab: Exploiting XXE using external entities to retrieve files

Lab: Exploiting XInclude to retrieve files