XML External Entity Injection (XXE) - Exploiting Web Application Vulnerabilities - Episode 3

Learn how to exploit XML External Entity (XXE) vulnerabilities in this 13-minute tutorial focused on hacking the Gin and Juice Shop, a deliberately vulnerable web application by Portswigger. Master essential XXE concepts including basic XML structure, scanning result analysis, file retrieval techniques, Server-Side Request Forgery (SSRF), and blind XXE data exfiltration methods. Explore practical demonstrations using Burp Suite and other security tools while discovering hidden attack surfaces. Perfect for aspiring bug bounty hunters, security researchers, penetration testers, and CTF players looking to enhance their web application security testing skills.