XML external entity - Lab: Exploiting XXE using external entities to retrieve files
XML external entity - Lab : Exploiting XInclude to retrieve files
XML external entity - Lab : Exploiting XXE via image file upload
XML external entity - Lab : Exploiting blind XXE to retrieve data via error messages