2 Videos for XML Attacks 01

PRO
Tier
Medium
< 1 Hr.
8823
image of exercise XML 01
Access to videos for this exercise is only available with PentesterLab PRO GOPRO
Spoiler
XML 01

In this video, we discuss a common vulnerability in XML parsing related to DTD (Document Type Definition) and demonstrate how to exploit it to access local files, including sensitive information like the `/etc/passwd` file.

video duration icon02:07 number of views icon9836

 

image of exercise XML 01: Code Review
Access to videos for this exercise is only available with PentesterLab PRO GOPRO
XML 01: Code Review

In this video, we conduct a resource code review of the challenge XML 01, part of the essential badge. We examine PHP code handling XML input, identifying vulnerabilities such as XML entity injection and Cross-Site Scripting (XSS).

video duration icon02:13 number of views icon839