Browse › Advanced Web Application Exploitation
Web 201 - Lab 7.2: Out of Band XXE Attacks
Part of Advanced Web Application Exploitation Topic: Web Hacking
Counts towards
Access
Included in StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
Sometimes there is an XML External Entity vulnerability, but exploiting it doesn't send any data back within the web application.
- If this is the case, it not only may be hard to detect that the issue exists, but it will also be difficult to exploit the issue.
- ⏱ About 60 minutes
- Counts towards: CompTIA PenTest+ (exam PT0-003) · OffSec Certified Professional (exam OSCP)
Roadmaps that use this lab
- CompTIA PenTest+ (PT0-003) — step 4: Web application testing
- OffSec Certified Professional (OSCP) — step 4: Web attack chains
- Penetration Tester — career path — step 4: Web application attacks
- Penetration Tester — career path — step 7: Certify it
- AI Security Engineer — career path — step 4: Attack AI like a red teamer
