Exploiting blind XXE to exfiltrate data using a malicious external DTD 1 XXE Injection Lab 5 Nov 27, 2024