$ tldr PortSwigger · XXE (XML External Entity)
XXE (XML External Entity)
Exploiting blind XXE to exfiltrate data using a malicious external DTD
PortSwigger Web Security Academy lab: Exploiting blind XXE to exfiltrate data using a malicious external DTD. Topic: XXE (XML External Entity).