2: XML External Entity Injection (XXE) - Gin and Juice Shop (Portswigger)

XML External Entity Injection (XXE) - Episode 3 of hacking the Gin and Juice shop; an intentionally vulnerable web application developed by Portswigger. The website was created primarily to demonstrate the features of Burp pro vulnerability scanner. However, throughout the series, we will leverage burp suite (and other tools) to exploit the high, medium, low and informational issues identified by the scanner. Hopefully these videos will be useful for aspiring bug bounty hunters, security researchers, pentesters, CTF players etc 🙂 …

application burp burp suite episode external features hacking injection portswigger pro scanner series shop vulnerability vulnerability scanner vulnerable vulnerable web application web web application website xml xxe