Burp Suite now reports blind XXE injection

Published

2015-05-06 14:33

Collected

2026-07-01 11:09

---
id: 414
title: "Burp Suite now reports blind XXE injection"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/burp-suite-now-reports-blind-xxe-injection"
published_at: "2015-05-06T14:33:00Z"
tags: ["burp-suite", "collaborator", "scanner", "blind-xxe", "xxe", "xml"]
phying_url: "https://phying.com/item/414"
lang: en
---

# Burp Suite now reports blind XXE injection

## Summary

Burp Suite Pro's scanner now detects blind XXE injection by defining external entities referencing Collaborator URLs, confirming out-of-band interactions that response-based checks missed.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2015-05-06T14:33:00Z
- **Original:** https://portswigger.net/blog/burp-suite-now-reports-blind-xxe-injection
- **Phying News:** https://phying.com/item/414