/xxelab

A simple web app with a XXE vulnerability.

Primary LanguageHTML

XXE Lab

This virtual environment is a simple php web application that contains an example of an XML eXternal Entity vulnerability.

Setting Up

This lab is designed to be used in vagrant. To get setup, first you need to clone this repo and then start vagrant.

$ git clone https://github.com/jbarone/xxelab.git
$ cd xxelab
$ vagrant up

Using

Once the site is up and running you simple navigate your browser to http://192.168.33.10 and have fun.

Notes

This lab works best when you make use of a proxy that will allow you to see the requests and responses. There are many you can use, but here are a few recommended ones: