xxe-attack-demo

XXE Attack Demo: Understanding and Defending Against XML External Entities

An XXE attack demo makes the vulnerability click: an XML parser that trusts external entities can be tricked into reading files or making requests. Here is how it works and how to shut it down.