Difficulty: Advanced
What is an XXE injection?
When an XML parser incorrectly processes external entities, potentially allowing attackers to read internal files or perform port scanning on the server.
XML, Injection
JavaScript is required for the interactive version of this page, including the code playground and progress tracking. Browse all InternHack tutorials.