Everything About ___
Live briefing

Everything about XML external entity attack

Type of attack on computer systems

XML External Entity attack, or simply XXE attack, is a type of attack against an application that parses XML input. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, DoS attacks, server-side request forgery, port scanning from the perspective of the machine where the parser is located, and other system impacts. Wikipedia →

🧭 Start here: a 6-step reading path

  1. Read the overview: XML external entity attackA 5-minute orientation
  2. Pick up a classic book: The web application hacker's handbookThe most-reprinted book on the subject
  3. Go sideways: Document type definitionA closely related topic
  4. Go sideways: Document type declarationA closely related topic

đź“– Definitions

No dictionary entry for this exact phrase.

🗂️ The subject at a glance

  1. Description
  2. Risk factors
  3. Examples
  4. Mitigation

🏆 Landmark papers (most cited)

đź“š Books worth reading

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

đź”— Related topics