WHOAMI
- Robemar Aviles
Tryhackme
- View
Hack the box
- View
Academy HTB
- View
Over The Wire
- View
  - Bandit
    Level 0
    Level 1
    Level 2
    Level 3
    Level 4
    Level 5
    Level 6
    Level 7
    Level 8
    Level 9
    Level 10
    Level 11
    Level 12
Under The Wire
- View
PicoCTF
- View
Portswigger
- View
Hacker101
- View
  - Micro-CMS v1
  - Trivial
Python
- View
  - Files
    Number 1 to 100
  - Hackerrank
    Power - Mod Power
    Mod Divmod
    String Split and Join
    What's Your Name?
    Find the Runner-Up Score!
    Print Function
    Loops
    Division
    Arithmetic
    Python If-Else
    Hello World
SQL
- View
  - Hackerrank
    Higher Than 75 Marks
    Weather Observation Station 1
    Weather Observation Station 3
    Weather Observation Station 4
    Select By ID
    Select All
    Revising the Select Query II
    Revising the Select Query I
    Japanese Cities' Attributes
    Japanese Cities' Name
Notes
- View
Commands
- View
Google Chrome Password
- Decrypt Google Chrome Password
- LaZagne
Comptia Security+ 701
CCNA
Malware Analysis Lab
TCM

Powered by GitBook

On this page

TCM

Practical Web Hacking

XXE

Lab: Exploiting XXE using external entities to retrieve files

PreviousXXE NextExploiting XXE via image file upload

Last updated 6 months ago

test the functionality of the web app

we can see that the web application is retrieving data through xml from the database

we can call the variable test to one of the parameter here in the application

like this

you can also try to navigate files like ssh in academy user in their home directory like in ctfs