#xxe articles | Hashnode

CDCoding Dropletscodingdroplets.comJun 7 · 12 min read

How to Protect ASP.NET Core APIs Against XXE Injection

XML External Entity (XXE) injection remains one of the more dangerous vulnerabilities in ASP.NET Core APIs that accept or process XML — and it is frequently misunderstood. Most .NET developers assume

0

TBTaha Benahmaditahaben.hashnode.devMar 10 · 3 min read

XXE Article

XXE Definition XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server fi...

0

STSieu Tran Quocblogs.night-wolf.ioOct 1, 2025 · 7 min read

Lỗ hổng XXE trong thư viện Dcm4che: Thư viện xử lý DICOM trong lĩnh vực y tế

I. Giới thiệu về DICOM DICOM (Digital Imaging and Communications in Medicine) là một chuẩn quốc tế được sử dụng rộng rãi trong ngành y tế để lưu trữ, truyền tải và xử lý hình ảnh y khoa như X-Quang, MRI, CT scan, siêu âm,… Chuẩn này còn định nghĩa gi...

0

IAIdo Abramovid0xa.hashnode.devJul 11, 2025 · 3 min read

HackTheBox - Web Attacks - Skills Assessment Walkthrough

Scenario You are performing a web application penetration test for a software development company, and they task you with testing the latest build of their social networking web application. Try to utilize the various techniques you learned in this m...

0

YYuvaSecyuvasec.hashnode.devApr 17, 2025 · 4 min read

The Billion Laughs Bomb

Introduction XML External Entity (XXE) attacks are not just theoretical, they're dangerously real. If your application processes XML in any way, API, file upload, or SOAP, you may already be vulnerable. And many developers don’t even know it. In this...

0

SNsanket narawadexxe.hashnode.devApr 12, 2025 · 3 min read

External Entity Injection (XXE)

What is XXE ? , What are the different types of XXE ? ,Different areas in the application can find XXE?, Bypasses , What are the vulnerability chain with XXE ?, What is there impact and mitigation ? Defination It is a vulnerability where allow an att...

0

JJebitoksharonjebitok.comJan 11, 2025 · 1 min read

The Advent of Cyber: Day 5: XXE - SOC-mas XX-what-ee? (TryHackMe)

In this article, we’ll cover the XXE - SOC-mas XX-what-ee? write-up as the Day 5 challenge of the Advent of Cyber event challenge. It was interesting to navigate Web Security for an e-commerce gifting site using PortSwigger’s XML external entity (XXE...

0

OJOhekpeje Joel Odeyjoelodey.hashnode.devNov 8, 2024 · 2 min read

Lab: Exploiting XXE to perform SSRF attacks

Lab Scenario: Our mission is to exploit XXE through a web application's "Check stock" feature, ultimately performing SSRF attacks to access sensitive information from a metadata endpoint. By intercepting and manipulating a POST request, we intend to ...

0

OJOhekpeje Joel Odeyjoelodey.hashnode.devApr 29, 2024 · 2 min read

Lab: Exploiting XXE using external entities to retrieve files

Lab Scenario: Our mission is to exploit XXE through a web application's "Check stock" feature, specifically using external entities to retrieve files. By intercepting and manipulating a POST request, we intend to use XXE to trigger the retrieval of s...

0

OJOhekpeje Joel Odeyjoelodey.hashnode.devApr 16, 2024 · 2 min read

Lab: Exploiting XInclude to retrieve files

Lab Scenario: Our mission is to exploit XInclude through a web application's "Check stock" feature. By intercepting and manipulating a POST request, we intend to use XInclude to retrieve files from the server. Let's proceed with the solution: Interc...

0

#xxe

#xxe

Explore Hashnode

Trending tags this week