Exploiting XInclude to Retrieve Files via XXE | PortSwigger Academy

Title:

Description:

In our 2nd video within the "Portswigger Academy" series, I show you how to leverage XInclude to retrieve remote files when you don't have the ability to modify XML in the request. Future videos will include additional XXE labs, as well as other web-application vulnerabilities identified in the OWASP top 10. Please consider sharing with a friend, hitting the like button, and subscribing!

PortSwigger WebSecurity Academy: https://portswigger.net/web-security

👇 SUBSCRIBE TO INFINITELOGINS YOUTUBE CHANNEL NOW 👇
https://www.youtube.com/c/infinitelogins?sub_confirmation=1

___________________________________________
Social Media:
Website: https://infinitelogins.com/
Twitter: https://twitter.com/infinitelogins
Twitch: https://www.twitch.tv/infinitelogins

___________________________________________
Donations and Support:
Like my content?  Please consider supporting me on Patreon:
https://www.patreon.com/infinitelogins

Purchase a VPN Using my Affiliate Link
https://www.privateinternetaccess.com/pages/buy-vpn/infinitelogins

___________________________________________
Tags:
#PortSwigger #WebApps #XXE

YouTube url:	https://youtu.be/XssYuDGJBJA
Created:	13. 11. 2020 17:31:01

CaptionsMaker.com

Exploiting XInclude to Retrieve Files via XXE | PortSwigger Academy