Exploiting blind XXE to exfiltrate data using a malicious external DTD
Laboratorio de Portswigger sobre XXE
Justice-Reaper
Blind XXE with out-of-band interaction via XML parameter entities
Laboratorio de Portswigger sobre XXE
Blind XXE with out-of-band interaction
Laboratorio de Portswigger sobre XXE
Exploiting XXE to perform SSRF attacks
Laboratorio de Portswigger sobre XXE
Exploiting XXE using external entities to retrieve files
Laboratorio de Portswigger sobre XXE
Remote code execution via polyglot web shell upload
Laboratorio de Portswigger sobre File Upload Vulnerabilities
Web shell upload via obfuscated file extension
Laboratorio de Portswigger sobre File Upload Vulnerabilities
Web shell upload via extension blacklist bypass
Laboratorio de Portswigger sobre File Upload Vulnerabilities
Web shell upload via path traversal
Laboratorio de Portswigger sobre File Upload Vulnerabilities
File path traversal, validation of file extension with null byte bypass
Laboratorio de Portswigger sobre Path Traversal