Advent of Cyber - Day 5: Exploiting XXE in Web Apps!

[@hardikpatel5761]

One of the best tutor from the event so far.

[@kylehicks8057]

I'm doing this as a beginner, and I couldn't agree more. I was getting really frustrated with the "now I'm here, now I'm here, now I'm here" on day 4. She seems like an excellent streamer, and I still subbed her channel, but cutting the video to 16 minutes just made me take twice as long to figure out where I might've done something wrong when I needed help. Tyler's walkthrough is spot-on and easy to follow for a newbie like me.

[@rodolfomarques1477]

My friend, you stand out by making everything so easy to understand. If I had to choose one of you to guide us through the rest of AoC, it would unquestionably be you.

[@TestTest-e9d]

The best ! THM should pay you to do videos for all the rooms! Everytime I watch you not only do I learn what is in the room but some tips and tricks that will go a long way in my career! Thank you so much! Much love from FRANCE.

[@QuickTimeDesign]

Definitely one of the standout tutors from the event so far.

[@SENostalgia]

Not only is the song a banger but I'm so stoked that you, my fav creator in cybersec, is a part of this cool event! Thanks for teaching many of us so much.

[@ammarxx1376]

I really loved your intro-it's super engaging and fun! Definitely sets the vibe. Great work! 🙌

[@sn3aky-t217]

Ok... Like I mentioned the Day 4 walkthrough you did. You sir, are an incredible tutor. You go over the content + you give MORE. I am new to blue teaming/red teaming and I do the challenge first, and then watch the walkthrough. If you only do the challenge you complety miss the Intruder part of Burp. That was so sick! Thank you for showing it. I went over it manually changing van wish2 all the way up to 20 by typing. This was super helpful!

[@scanoscope]

I have to say this whole cyber advent was such a good idea well executed with love and care. thank you guys

[@Alex-nq5nz]

Definitely one of the best till now!

[@atharvavlogs1446]

Best tutor from the event so far.

[@khyalhajee5802]

Best intro of any KZbin vid i have ever watched. Also great tutoring, best of the event so far.

[@mattiaseriksson9403]

Thanks for the superb explanation of XXE.

[@playfulsteps9249]

Great video! I love that you explain absolutely everything that you are doing. Great for beginners and even those that are more advanced that may have skipped certain steps or different solutions. Love the use of Intruder too by the way!

[@c0ri]

This room was exactly what I would expect from beginner friendly rooms for the AoC. Amazing walkthrough Tyler! Loved this year's song :D

[@dandermono]

Best explanation! thank you for doing step by step and even adding extra stuff!

[@marcossilva8726]

The best explanation about this! Congratulations

[@utilitylab]

Such a great teaching style!! Love that you went through the subject in demonstration making it so much easier to grasp

[@TRD_Mike]

Great video, very well done and you do a great job explaining things!

[@handle_your_set]

Love love the way you are doing this. I've been having connection issues, and losing my machine while waiting for it to load... I genuinely appreciate the walkthroughs, just because it prevents frustration from that damn clock anxiety, and tempermental connections.

[@tidallama53509]

Nice tricks with adding the number variables in Intruder. That was way easier than trying to do it in the Repeater window.

[@brianmulder596]

Excellent job and that song was great! Loved the last one too. Thanks!

[@STesClix]

I really like your presentation and explanation. You have the vibe, you have energy and you have strength to motivate people like us. Also I want to say not only you Ryan he also have good Speaking energy to teach this course. I hope rest of the day you and Ryan can teach this course so we can really understand about this course. Thank you ❤

[@DadVibe]

Damn, this song has me hyped to tackle day 5!

[@Lahmikhara]

Another great video! This really helped me clear up what I was muddling through with the challenge. I did manage to complete it with my limited knowledge, but this video gave me a much clearer idea of what I was doing.

[@jcbenge08]

Thank you, your explanation made a ton of sense and I actually feel like I understand XXE better!

[@KalPsycho-b6y]

Thanks for that Banger Dude, That was cool Intro and Walk through ! If Only others put efforts like You did .

[@M0l0T0VB0y]

That intro is Fire! 🔥

[@PokeMatteo]

the rap song at the beginning is genuinely a banger! love the vid, learning about burp suite is super fun ❤

[@Zelousfear]

Woot Tyler's back

[@pinchesteve4431]

Playing this Jingle Bells song at 1.75 speed is pretty awesome. lol.... nice work Tyler!

[@tech-with-joe]

Incredible explanationTyler!

[@Dr4hcir]

Great song, great guide! Thank you.

[@__4654]

The best tutor ever!

[@LempwicksWorld]

This challenge was so much fun! loving advent of cyber

[@pramodyadav.007]

THaMks Taylor for your contribution, and hey nice rap at the introduction!! Happy holidays in advance man!!

[@buta-v3x]

i LOVE way you explain good job :D

[@artmispotter3571]

great walkthrough.

[@IAM-b9w]

U r The best tutor Tyler! from the avent ,,,,,,Love You ❤❤❤

[@levi-w2f]

YOOOO lets goooooo day 5 with tyler🥳🥳🥳🥳🥳🥳🥳🥳

[@Ox8jOrn4r8Or93]

Great video Tyler! Thanks!

[@x9rtu3os1t8]

Thank you for everything

[@makesime3330]

seriously need to release that song on spotify !

[@tonykanaan7668]

Fire intro 🔥🔥🔥🔥

[@fharoe]

Rap is dope at the start

[@daratolsam]

If you've started and you'll definitely👌 finish this challenge, let's gather here 👇👇👇❤❤❤💪💪

[@T21hcl9BbWly]

the 🐐 thanks tyler ❤‍🔥

[@samuelkamau9978]

Tyler is amazing, great song, web pen and real pen testing my new mentor #worksmarter

[@pavelkriukov4168]

It is THE BEST reincarnation of Clint Eastwood I’ve ever seen!!!

[@wassimmariamable]

Tyler you are a super star buddy. Now my question to you is, do you have any course content on using Burp Suite that you have made. You made that look so easy. Thank you 😃

[@Miklos211]

For me it's not opening through chromium. I click on "open browser", opens chromium, I paste the address in and it loads indefinetaly. With firefox it works but then I'm not getting the php code in burp how I supposed to

[@nabeelmahomed86]

Same thing happened to me I just turned interception off to get into product.php, then turned it back on before clicking add to wishlist so I'd have access to the POST request

[@BATTLESTAR42]

I wish the documentation for the day mentioned turning intercept off, not very intuitive if you've never used Burp

[@dj_bsec]

LETS GOOOOOOOOOOO

[@MusthaqueIllias]

great one

[@qhubekanimaphosa1267]

Good day. GThank you for the tutorial. My machine failed to start. I need more practice on XML

[@NiteshRaj-r2x]

good content

[@DadVibe]

Create explanation! Thank you.

[@zonzipol4745]

Thank you.

[@ritampal31]

Hey, my Firefox isn't responding, like the loading is not responding in the attack box

[@onrymusic9876]

same here

[@nikkirawal3822]

Thanks For The tutorial ❤❤

[@drmalc0m]

Boy I love that intro 🤣

[@invisibleliberty2275]

How did you find about the changelog?

[@romeoC9968]

note the version of burp used here is different to what is in the attackbox

[@TylerRamsbey]

If it is, that is on THM lol - I used the attackbox for the video.

[@r3b00t5]

hoping to find that track on spotify soon :D

[@shehryaarmh6615]

THANK U MATE❤

[@amitkalarikade1662]

joined the community

[@ghostkai94]

Very nice Intro my friend

[@JaysCyber]

That song was fire lol

[@beta4035]

Do you have a discord of your own?? I would love to join so I can share some questions! You truly have proved the best during these challenges

[@TylerRamsbey]

hacksmarter.org

[@a1s2_ca]

Where can I get that Papa Shell T ?

[@samratadhikari3223]

intro 🔥

[@ДмитрийКузнецов-я4д]

Is the track on spotify?)

[@Hik-g5m]

hi do you recommend any apps to be safe online or private like do you use any cybersecuritty

[@MarcelN1980]

Peeeeerfect! Thanks!

[@ZyberS3c]

where can we find the song?

[@learnwithcheryl]

Coolest Carol I've ever heard! 😂

[@trickwheel]

I had "403 Your access is denied to this resource" When attempting to access the changelog. Not sure why. How do you move around that?

[@trickwheel]

If it was not shown in the video I would have never been able access it despite my troubleshooting.

[@samratadhikari3223]

is it on spotify ??😂

[@T21hcl9BbWly]

wait i want this dark theme in thm how to do it

[@TylerRamsbey]

There is no Dark Theme -- I just use "Dark Reader" which is an extension for Firefox or Chromium-based browsers :)

[@cheesecakesan4792]

Lmao the webpage eats fps for breakfast

[@roryf.1349]

Thanks Tyler, great video!