Out of Band Exploitation (OOB) CheatSheet | NotSoSecure
December 16, 2021 at 5:05:35 PM UTC - permalink -

- https://notsosecure.com/out-band-exploitation-oob-cheatsheet

gist.githubusercontent.com/honoki/d7035c3ccca1698ec7b541c77b9410cf/raw/be69a5ecf7974057d49f3f32ccd9a7a72668c2e5/xxe-payloads.txt
November 29, 2021 at 8:24:01 PM UTC - permalink -

- https://gist.githubusercontent.com/honoki/d7035c3ccca1698ec7b541c77b9410cf/raw/be69a5ecf7974057d49f3f32ccd9a7a72668c2e5/xxe-payloads.txt

Don't open that XML: XXE to RCE in XML plugins for VS Code, Eclipse, Theia, ... - Shielder
October 24, 2019 at 10:43:16 PM UTC - permalink -

- https://www.shielder.it/blog/dont-open-that-xml-xxe-to-rce-in-xml-plugins-for-vs-code-eclipse-theia/