2 Videos for XML Attacks 01

PRO
Tier
Medium
Medium
9157 completed
Return to Exercise
image of exercise XML 01

This video requires PentesterLab PRO

GO PRO
Spoiler
XML 01

In this video, we discuss a common vulnerability in XML parsing related to DTD (Document Type Definition) and demonstrate how to exploit it to access local files, including sensitive information like the `/etc/passwd` file.

video duration icon02:07 number of views icon10225

 

image of exercise XML 01: Code Review

This video requires PentesterLab PRO

GO PRO
XML 01: Code Review

In this video, we conduct a resource code review of the challenge XML 01, part of the essential badge. We examine PHP code handling XML input, identifying vulnerabilities such as XML entity injection and Cross-Site Scripting (XSS).

video duration icon02:13 number of views icon946