Labs - Web Security Academy (PortSwigger)

XML external entity - Lab: Exploiting XXE using external entities to retrieve files

XML external entity - Lab : Exploiting XInclude to retrieve files

XML external entity - Lab : Exploiting XXE via image file upload

XML external entity - Lab : Exploiting blind XXE to retrieve data via error messages