Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to Find XXE Bugs: Severe, Missed and Misunderstood

Summary

hakluke explains why XXE is severe and often missed by automated scanners. The guide covers XML entities and how XXE enables arbitrary file reads, SSRF, DoS, and sometimes RCE.
Published
Collected

original ↗

Related coverage

back