XML External Entity Injection
Learn to identify, exploit, and mitigate XML External Entity (XXE) vulnerabilities. Gain practical skills to enhance application security and protect against data disclosure and system impacts.
Web App Testing - XXE, Input Validation, Broken Access Control, and More XSS
Explore advanced web app testing techniques including XXE, input validation, broken access control, and XSS. Enhance your ethical hacking skills and learn to identify critical vulnerabilities.
FileCry - The New Age of XXE
Explore critical XXE vulnerabilities in enterprise software, including 0-day exploits in Java and Internet Explorer. Learn detection, exploitation, and prevention techniques.
Exploiting XXE Vulnerabilities in File Parsing Functionality
Techniques for exploiting XXE vulnerabilities in file parsing, focusing on XML-supported formats like docx and xlsx. Includes real-world examples and introduces a tool for creating 'XXE backdoored' files.
Finding 0days in Enterprise Web Applications
Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.
Hunting Asynchronous Vulnerabilities
Explore techniques for uncovering hidden vulnerabilities in backend systems using exploit-induced callbacks. Learn to detect and exploit asynchronous issues across various technologies and platforms.