XML External Entity (XXE) Injection
intermediate Hands-on lab 45 min 3 tasksSubscription
Abuse an XML parser that resolves external entities to read files off the server.
This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.
Unlock this lab
Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.
Updated 2026-09-02