Uncle Rat's XXE Handbook

Uncle Rat's XXE Handbook, available at Free, has an average rating of 3.95, with 14 lectures, based on 150 reviews, and has 18182 subscribers.

You will learn about What an XXE is How to exploit XXE's XXE Filter evasion techniques Tools to test for XXE How to prevent XXE This course is ideal for individuals who are Developers looking to find out how XXE works or Pentesters looking to add XXE to their arsenal or Bug bounty hunters looking to add XXE to their arsenal It is particularly useful for Developers looking to find out how XXE works or Pentesters looking to add XXE to their arsenal or Bug bounty hunters looking to add XXE to their arsenal.

Enroll now: Uncle Rat's XXE Handbook

Summary

Title: Uncle Rat's XXE Handbook

Price: Free

Average Rating: 3.95

Number of Lectures: 14

Number of Published Lectures: 14

Number of Curriculum Items: 15

Number of Published Curriculum Objects: 15

Original Price: Free

Quality Status: approved

Status: Live

What You Will Learn

What an XXE is
How to exploit XXE's
XXE Filter evasion techniques
Tools to test for XXE
How to prevent XXE

Who Should Attend

Developers looking to find out how XXE works
Pentesters looking to add XXE to their arsenal
Bug bounty hunters looking to add XXE to their arsenal

Target Audiences

Developers looking to find out how XXE works
Pentesters looking to add XXE to their arsenal
Bug bounty hunters looking to add XXE to their arsenal

Who am i?

An experienced instructor with over 10 000 happy students on udemy, i spend my time making complex topic reacheable for anyone wanting to learn and understand them. As a dad of a toddler, i know what it means to have to simplify things but even before all this i was already emerged in the world of training IT profiles in software test automation and performance testing, having gotten my neoload expert certification in Paris so i could teach that software in a 3 day course that would prepare staff for neoload certification. All this helped me when i gained some experience in bug bounties on Intigriti (You can find me as theamazingferret) in a short time, i decided to start up my youtube channel because people kept asking me the same questions and this was a way to help them better. People seemed to like my teaching and it blew to where we are today. You can find me on LinkedIn as Wesley Thijs or on youtube or twitter or even facebook as the XSS Rat.

What does this course offer?

During my time as a bug bounty hunter and pentester i found i liked the XXE vulnerability type quite a lot. In this course i explain to you where XXE stems from, what it entails, how to exploit it and even how to prevent it. Every video file has a full PDF covering the topics in detail. To finish off i will you show you how to exploit this vulnerability in a set of practical video’s demonstrated on one of my old CTF machines and on the portswigger labs.

Not only will you learn how to find and exploit this vulnerability but i will complete your skillset by giving you general guidance on preventing this issue type.

Course Curriculum

Chapter 1: Introduction

Lecture 1: Discord invite link

Lecture 2: Introduction

Chapter 2: What is XXE

Lecture 1: What is XXE?

Chapter 3: XXE Entry points

Lecture 1: XXE Entry points

Chapter 4: Exploiting XXE

Lecture 1: Exploiting XXE

Chapter 5: WAF and filter evasion

Lecture 1: WAF and filter evasion

Chapter 6: Tools to find and how to prevent XXE

Lecture 1: Tools to find and how to prevent XXE

Chapter 7: Throwing it all together

Lecture 1: Throwing it all together

Chapter 8: Let's try it

Lecture 1: Labs: XXE

Chapter 9: Practical examples

Lecture 1: XXE On the portswigger labs

Lecture 2: XXE Is so much more than just XML

Lecture 3: XXE Through DOCX

Lecture 4: Blind XXE and parameter Entities

Lecture 5: Chaining XXE into SSRF

Instructors

Wesley Thijs
I am the XSS Rat

Rating Distribution

1 stars: 7 votes
2 stars: 1 votes
3 stars: 16 votes
4 stars: 53 votes
5 stars: 73 votes

Frequently Asked Questions

How long do I have access to the course materials?

You can view and review the lecture materials indefinitely, like an on-demand channel.

Can I take my courses with me wherever I go?

Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don’t have an internet connection, some instructors also let their students download course lectures. That’s up to the instructor though, so make sure you get on their good side!

Menu