Exploiting XXE Vulnerabilities in File Parsing Functionality
The Most Addictive Python and SQL Courses
AI, Data Science & Cloud Certificates from Google, IBM & Meta
Overview
Google, IBM & Meta Certificates – 40% Off
One plan covers every Professional Certificate on Coursera.
Unlock All Certificates
Explore techniques for exploiting XXE vulnerabilities in file parsing and upload functionality in this Black Hat conference talk. Delve into XML Entity Attacks within XML-supported file formats like docx, xlsx, and pptx, using real-world examples from products and recent bug bounties. Learn step-by-step technical details and discover a battle-tested tool for efficiently creating 'XXE backdoored' files across various formats.
Syllabus
Exploiting XXE Vulnerabilities In File Parsing Functionality
Taught by
Black Hat