Exploiting blind XXE to exfiltrate data using a malicious external DTD 1 XXE Injection Lab 5 27/11/2024