XML External Entity (XXE) Injection Courses and Certifications

Uncle Rat's XXE Handbook

151 ratings at Udemy

Comprehensive guide to XXE vulnerabilities: learn detection, exploitation, evasion techniques, and prevention methods through practical demonstrations and detailed explanations.

• Udemy
• 1 hour 6 minutes
• On-Demand
• Free Online Course

OWASP Top 10: #3 Sensitive Data Exposure and #4 External Entities (XXE)

131 ratings at LinkedIn Learning

Get an overview of the #3 and #4 top software vulnerabilities—injection and insecure design—described in the 2021 OWASP Top 10.

• LinkedIn Learning
• 32 minutes
• On-Demand
• Free Trial Available

Secure Coding: Identifying and Mitigating XML External Entity (XXE) Vulnerabilities

26 ratings at Pluralsight

This course will teach you what XML External Entity vulnerabilities are, how they are exploited, how you can identify the vulnerabilities in your code, and how you can protect your code against exploitation.

• Pluralsight
• 1-2 hours
• On-Demand
• Free Trial Available

Learn to identify, exploit, and protect against XML External Entities (XXE) vulnerabilities. Gain hands-on experience through demos and labs, focusing on real-world scenarios like the Facebook XXE vulnerability.

• Cybrary
• 2-3 hours
• On-Demand
• Paid Course

Cyber Mentor

Web App Testing - XXE, Input Validation, Broken Access Control, and More XSS

Explore advanced web app testing techniques including XXE, input validation, broken access control, and XSS. Enhance your ethical hacking skills and learn to identify critical vulnerabilities.

• YouTube
• 1 hour 57 minutes
• On-Demand
• Free Video

Bugcrowd

XML External Entity Injection

Learn to identify, exploit, and mitigate XML External Entity (XXE) vulnerabilities. Gain practical skills to enhance application security and protect against data disclosure and system impacts.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Protecting Against XML External Entity and Deserialization Attacks in ASP.NET and ASP.NET Core

19 ratings at Pluralsight

We think of XML, JSON and binary serialized data as a way to exchange data between applications, but these data formats can also be used by hackers to attack your applications. This course will teach you how you can prevent them.

• Pluralsight
• On-Demand
• Free Trial Available

44CON Information Security Conference

Hunting Asynchronous Vulnerabilities

Explore techniques for uncovering hidden vulnerabilities in backend systems using exploit-induced callbacks. Learn to detect and exploit asynchronous issues across various technologies and platforms.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

NahamSec

Finding 0days in Enterprise Web Applications

Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Black Hat

Exploiting XXE Vulnerabilities in File Parsing Functionality

Techniques for exploiting XXE vulnerabilities in file parsing, focusing on XML-supported formats like docx and xlsx. Includes real-world examples and introduces a tool for creating 'XXE backdoored' files.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Black Hat

FileCry - The New Age of XXE

Explore critical XXE vulnerabilities in enterprise software, including 0-day exploits in Java and Internet Explorer. Learn detection, exploitation, and prevention techniques.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk