Скачать или смотреть XML External Entity Injection | TryHackMe Advent of Cyber Day 5 Walkthrough

The video provides a detailed walkthrough of Day 5 of the Advent of Cyber 2024 challenge on the TryHackMe platform. This challenge focuses on understanding XML (Extensible Markup Language) and XML External Entity (XXE) Injection vulnerabilities.
****
Receive Cyber Security Field, Certifications Notes and Special Training Videos
https://buymeacoffee.com/notescatalog...
TryHackMe Advent of Cyber Day 2024 Full Walkthrough
https://motasem-notes.net/tryhackme-a...
******
Store
https://buymeacoffee.com/notescatalog...
Patreon
  / motasemhamdan  
Instagram
  / mastermindstudynotes  
Google Profile
https://maps.app.goo.gl/eLotQQb7Dm6ai...
LinkedIn
[1]:   / motasem-hamdan-7673289b  
[2]:   / motasem-eldad-ha-bb42481b2  
Instagram
  / mastermindstudynotes  
Twitter
  / manmotasem  
Facebook
  / motasemhamdantty  
***
00:00 Introduction to Advent of Cyber 2024
00:09 Overview of Day 5 Challenge
00:18 Understanding XML Basics
01:03 Document Type Definitions (DTD) Explained
01:51 Introduction to XML Entities
02:33 XML External Entity (XXE) Attacks
03:27 Deploying the Virtual Machine
04:03 Interacting with the Challenge Website
05:19 Adding Products to Wishlist
06:12 Investigating Wishlist Requests
07:26 Exploring XML in Wishlist Requests
08:28 Exploiting XXE Vulnerabilities
10:09 Accessing Unauthorized Wishes
12:02 Solving the Challenge and Extracting the Flag
13:32 Outro and Next Steps