Basic SSRF against another back-end system
Laboratorio de Portswigger sobre SSRF
Justice-Reaper
Basic SSRF against the local server
Laboratorio de Portswigger sobre SSRF
Exploiting XXE via image file upload
Laboratorio de Portswigger sobre XXE
Exploiting XInclude to retrieve files
Laboratorio de Portswigger sobre XXE
Exploiting blind XXE to retrieve data via error messages
Laboratorio de Portswigger sobre XXE
Exploiting blind XXE to exfiltrate data using a malicious external DTD
Laboratorio de Portswigger sobre XXE
Blind XXE with out-of-band interaction via XML parameter entities
Laboratorio de Portswigger sobre XXE
Blind XXE with out-of-band interaction
Laboratorio de Portswigger sobre XXE
Exploiting XXE to perform SSRF attacks
Laboratorio de Portswigger sobre XXE
Exploiting XXE using external entities to retrieve files
Laboratorio de Portswigger sobre XXE