XML External Entities (XXE) Explained

    XML External Entities (XXE) Explained
  
Video by: PwnFunction
Upload date: 28 Feb 2019
Archive date: 14 Oct 2021
Video length: 20:11 minutes
▶️ Watch on YouTube
🗄️ Source files

      Report a problem

Description

#WebSecurity #XXE A video on Exploiting XML parsers, specifically on XML External Entity attacks. 🔗 Links John's channel : https://www.youtube.com/user/RootOfTheNull Stok's video on OOB XXE via file uploads : https://www.youtube.com/watch?v=aSiIHKeN3ys Ippsec's Fulcrum walkthrough : https://www.youtube.com/watch?v=46RJxJ-Fm0Y Nicolas Grégoire's works : https://www.agarri.fr/en/ Exploiting XXE with local DTD files : https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/ SPONSORED BY INTIGRITI – intigriti.com 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw #WebSecurity #XXE #CTF

Full info JSON dump

{'_id': ObjectId('6404c3ff541bd015784ba3c5'), 'id': 'gjm6VHZa_8s', 'title': 'XML External Entities (XXE) Explained', 'description': "#WebSecurity #XXE\n\nA video on Exploiting XML parsers, specifically on XML External Entity attacks.\n\n🔗 Links\nJohn's channel : https://www.youtube.com/user/RootOfTheNull\nStok's video on OOB XXE via file uploads : https://www.youtube.com/watch?v=aSiIHKeN3ys\nIppsec's Fulcrum walkthrough : https://www.youtube.com/watch?v=46RJxJ-Fm0Y\nNicolas Grégoire's works : https://www.agarri.fr/en/\nExploiting XXE with local DTD files : https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/\n\nSPONSORED BY INTIGRITI – intigriti.com\n\n🎵 Track: Warriyo - Mortals (feat. Laura Brehm)\nNCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw\n\n#WebSecurity #XXE #CTF", 'upload_date': '20190228', 'uploader': 'PwnFunction', 'uploader_id': 'UCW6MNdOsqv2E9AjQkv9we7A', 'uploader_url': 'http://www.youtube.com/channel/UCW6MNdOsqv2E9AjQkv9we7A', 'channel_id': 'UCW6MNdOsqv2E9AjQkv9we7A', 'channel_url': 'https://www.youtube.com/channel/UCW6MNdOsqv2E9AjQkv9we7A', 'duration': 1211, 'view_count': 70780, 'average_rating': 4.9601493, 'age_limit': 0, 'webpage_url': 'https://www.youtube.com/watch?v=gjm6VHZa_8s', 'categories': ['Education'], 'tags': ['XXE', 'XML', 'External', 'Entities', 'WebSecurity', 'BugBounty', 'JohnHammond', 'Web', 'Infosec', 'Security', 'CTF'], 'playable_in_embed': True, 'is_live': False, 'was_live': False, 'live_status': 'not_live', 'like_count': 2385, 'dislike_count': 24, 'channel': 'PwnFunction', 'availability': 'public', 'webpage_url_basename': 'watch', 'extractor': 'youtube', 'extractor_key': 'Youtube', 'n_entries': 16, 'playlist_index': 12, 'playlist': 'PwnFunction - Videos', 'playlist_id': 'UCW6MNdOsqv2E9AjQkv9we7A', 'playlist_title': 'PwnFunction - Videos', 'playlist_uploader': 'PwnFunction', 'playlist_uploader_id': 'UCW6MNdOsqv2E9AjQkv9we7A', 'display_id': 'gjm6VHZa_8s', 'asr': 44100, 'format_id': '22', 'format_note': '720p', 'fps': 30, 'height': 720, 'quality': 8, 'tbr': 186.501, 'width': 1280, 'language': '', 'language_preference': -1, 'ext': 'mp4', 'vcodec': 'avc1.64001F', 'acodec': 'mp4a.40.2', 'protocol': 'https', 'video_ext': 'mp4', 'audio_ext': 'none', 'vbr': 186.501, 'abr': 0.0, 'format': '22 - 1280x720 (720p)', 'fulltitle': 'XML External Entities (XXE) Explained', 'epoch': 1634251681, '_status': 'available', '_title_slug': 'xml-external-entities-xxe-explained'}

XML External Entities (XXE) Explained

Description

Full info JSON dump

Categories

Tags