Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Exploiting XXE Vulnerabilities in File Parsing Functionality

Black Hat via YouTube

Overview

Explore techniques for exploiting XXE vulnerabilities in file parsing and upload functionality in this Black Hat conference talk. Delve into XML Entity Attacks within XML-supported file formats like docx, xlsx, and pptx, using real-world examples from products and recent bug bounties. Learn step-by-step technical details and discover a battle-tested tool for efficiently creating 'XXE backdoored' files across various formats.

Syllabus

Exploiting XXE Vulnerabilities In File Parsing Functionality

Taught by

Black Hat

Reviews

Start your review of Exploiting XXE Vulnerabilities in File Parsing Functionality

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.