XXE

In-Band

file:///tmp/.TZCX32/1.png

In a very simple case we can try to extract local file to test out for XXE

- FTP
- HTTP
- JAR
- PHP
- NETDOC
- EXPECT -> Equivalent exec - RCE
(Protocol available if activated)
Procotole - <!ENTITY fichier SYSTEM “file:///etc/passwd”> ]>

Out-of-band

Send out an request that points to your server

Notes:

Watch for spaces/wrong indent/new lines