XML External Entity (XXE) Injection Courses and Certifications

Uncle Rat's XXE Handbook

147 ratings at Udemy

Learn to exploit and prevent XXE vulnerabilities with this concise course by a seasoned Udemy instructor. Includes practical demonstrations and detailed PDFs.

• Udemy
• 1 hour 6 minutes
• On-Demand
• Free Online Course

Secure Coding: Identifying and Mitigating XML External Entity (XXE) Vulnerabilities

26 ratings at Pluralsight

This course will teach you what XML External Entity vulnerabilities are, how they are exploited, how you can identify the vulnerabilities in your code, and how you can protect your code against exploitation.

• Pluralsight
• 1-2 hours
• On-Demand
• Free Trial Available

OWASP Top 10: #3 Sensitive Data Exposure and #4 External Entities (XXE)

Take a deep dive into the third and fourth categories of security vulnerabilities in the OWASP Top 10—sensitive data exposure and XML external entities (XXE).

• LinkedIn Learning
• On-Demand
• Free Trial Available

Learn to identify, exploit, and remediate top web security vulnerabilities with this intermediate-level program by Cybrary. Developed by a seasoned security professional, it offers self-paced, customizable learning in 2-3 hours.

• Cybrary
• 2-3 hours
• On-Demand
• Paid Course

Cyber Mentor

Web App Testing - XXE, Input Validation, Broken Access Control, and More XSS

Learn practical ethical hacking with Cyber Mentor in a 1-2 hour session, focusing on web app testing, input validation, and broken access control.

• YouTube
• 1 hour 57 minutes
• On-Demand
• Free Online Course

Bugcrowd

XML External Entity Injection

Learn to combat XML External Entity attacks with Bugcrowd University's concise program. Understand XML parsing, data confidentiality, and server-side request forgery in under an hour.

• YouTube
• 19 minutes
• On-Demand
• Free Online Course

Protecting Against XML External Entity and Deserialization Attacks in ASP.NET and ASP.NET Core

19 ratings at Pluralsight

We think of XML, JSON and binary serialized data as a way to exchange data between applications, but these data formats can also be used by hackers to attack your applications. This course will teach you how you can prevent them.

• Pluralsight
• On-Demand
• Free Trial Available

NahamSec

Finding 0days in Enterprise Web Applications

Explore offensive security with NahamSec's under 1-hour material, focusing on finding 0days in enterprise web applications. Learn from live sessions every Sunday on Twitch.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Black Hat

Exploiting XXE Vulnerabilities in File Parsing Functionality

Learn to exploit XXE vulnerabilities in file parsing/upload functionality with real-world examples in a 25-minute briefing by Black Hat.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Black Hat

FileCry - The New Age of XXE

Learn to identify and exploit XXE vulnerabilities in server and client-side technologies with Black Hat. Understand prevention methods in under 1 hour.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Hunting Asynchronous Vulnerabilities

Learn to identify hidden vulnerabilities in backend functions with James Kettle's presentation at 44CON. Master exploit-induced callbacks to detect issues like SQL injection and shell command injection.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk