Uncle Rat's XXE Handbook

Understand how XXE attacks exploit XML external entities through an XML processor, revealing how an attacker can access internal resources and even reach an admin panel via blind XXE techniques.

Explore XXE entry points and attack vectors, including injecting external entities via image and PDF payloads, content-type manipulation, and XML or SOAP based requests.

Learn how XXE vulnerabilities enable file exfiltration, remote command execution, and reverse shells. Explore blind XXE, get parameters exfiltration, and testing with proper permissions.

Explore how web application firewalls filter requests and how to evade them by encoding payloads with base64 or UTF seven, decoded via the eval function in XML, with practical examples.

Explore how external entity attacks leverage xml to read files and execute commands, and prevent them with static code analysis, dynamic analysis, and awareness of tainted dtd sections.

Learn about XML external entities (XXE), its types from file retrieval to blind tests, and develop a tech strategy using burp collaborator to detect out-of-band callbacks across XML surfaces.

Explore how XML external entities enable XXE exploits, create nested entities to reveal data, and practice retrieving the password file in PortSwigger labs.

Explains how xml external entity (xxe) attacks extend to image uploads, using doctype entities and spg files to reveal the hostname of the server through avatar processing.

Learn how xxe via a docx upload exposes admin access by manipulating a jwt token, cookies, and hidden file storage, through practical enumeration and payload techniques.

Learn how to perform blind XXE and test XML parameter entities using Berp collaborator, with practical steps to trigger, observe, and resolve external entity requests in lab setups.

Learn how an xxe vulnerability can chain into an ssrf to access an internal, unauthenticated metadata endpoint and reveal credentials through recursive payload traversal.