Browse › Advanced Web Application Exploitation
Web 201 - Lab 7.1: XXE to Obtain Arbitrary Files
Part of Advanced Web Application Exploitation Topic: Web Hacking
Counts towards
Access
Included in StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
In this lab, we will explore the basic limitations of XXE and techniques that can be used in a PHP web application to overcome them.
- ⏱ About 60 minutes
- Counts towards: CompTIA PenTest+ (exam PT0-003) · OffSec Certified Professional (exam OSCP)
Roadmaps that use this lab
- CompTIA PenTest+ (PT0-003) — step 4: Web application testing
- OffSec Certified Professional (OSCP) — step 4: Web attack chains
- Penetration Tester — career path — step 4: Web application attacks
- Penetration Tester — career path — step 7: Certify it
- AI Security Engineer — career path — step 4: Attack AI like a red teamer
