YoVDO

Exploiting XXE Vulnerabilities in File Parsing Functionality

Offered By: Black Hat via YouTube

Tags

Black Hat Courses Cybersecurity Courses XML External Entity (XXE) Injection Courses Web Application Security Courses

Course Description

Overview

Explore techniques for exploiting XXE vulnerabilities in file parsing and upload functionality in this Black Hat conference talk. Delve into XML Entity Attacks within XML-supported file formats like docx, xlsx, and pptx, using real-world examples from products and recent bug bounties. Learn step-by-step technical details and discover a battle-tested tool for efficiently creating 'XXE backdoored' files across various formats.

Syllabus

Exploiting XXE Vulnerabilities In File Parsing Functionality


Taught by

Black Hat

Related Courses

Secure Coding: Identifying and Mitigating XML External Entity (XXE) Vulnerabilities
Pluralsight Protecting Against XML External Entity and Deserialization Attacks in ASP.NET and ASP.NET Core
Pluralsight OWASP Top 10: #3 Sensitive Data Exposure and #4 External Entities (XXE)
LinkedIn Learning OWASP Top 10 - A4:2017 - XML External Entities
Cybrary Uncle Rat's XXE Handbook
Udemy