2: XML External Entity Injection (XXE) - Gin and Juice Shop (Portswigger)

[@aneneolisa4306]

I am looking forward to your video on HTTP response header injection

[@_CryptoCat]

👀

[@m3sm4r2010]

hi bro ,you are doingg a great job ,keep it up❤

[@_CryptoCat]

Thanks mate! 🥰

[@iSgapetti]

Hey what is this qtunnel command or tool you used?

[@_CryptoCat]

It's basically just a bash alias (shortcut) to quickly spawn this: tunnelto.dev
Similar to ngrok, webhook, requestbin but allows you to keep the same address each time 😊

[@jaywandery9269]

I believe you positioned your parameter entity wrongly. I think you should try % xxe instead of xxe % system.

[@_CryptoCat]

awww wtf, I think you're right. I thought I tried all variations but reviewing the vid apparently I did not 😞 Guess I should of just copy/pasted the portswigger payload 😭

[@kdnowlq]

hi cat

[@_CryptoCat]

heyyy 💜