XXE Injection - Detailed Walkthrough - (TryHackMe!)

In this video, I work through the new "XXE Injection" room on TryHackMe!
We get hands-on practice with exploiting XXE vulnerabilities and cover the following:
Recognizing the fundamental concepts and dangers associated with XXE injection.
Identifying vulnerable XML processing configurations and practices.
Developing techniques for detecting, exploiting, and mitigating XXE vulnerabilities in applications.
I also showcase the full room with Caido. Caido is a web proxy/security tool built in Rust!
----
Hack Smarter: hacksmarter.org
Caido: caido.io

[@thedoctord]

you know these uncut attempts are so fun, getting stuck and seeing a fellow man get stuck as well hits different

[@TylerRamsbey]

haha appreciate it sir!

[@Salvabro]

For me this content is gold, thanks man❤

[@Allen-TAN]

Learned so much as always, thanks a lot for the excellent workkkkk, thank you Tyler

[@yahyatareen4944]

Gold video ...but my eyes are hurting by switching back to my tryhackme screen lol...how in the world you have THM in Dark mode...theres nothing in settings

[@GilligansTravels]

My burp community edition works correctly for this but not pro I will have to try Caido

[@Jarling-so4oi]

OWASP ZAP and Caido are the better options, CAIDO paywalls things like the amount of tasks you can have and the AI assistant, ZAP is free