Blind XXE
What is blind XXE?
What is blind XXE?
Exploiting blind XXE to retrieve data via error messages
Exploiting blind XXE by repurposing a local DTD
Exploiting blind XXE to exfiltrate data out-of-band
--> In this lab we have the blind command injection vuln. in feedback form so we have to make the website sleep for 10 seconds