blind xxe payload - SERP Analysis

https://portswigger.net/web-security/xxe/blind

https://www.imperva.com/learn/application-security/xxe-xml-external-entity/

https://www.invicti.com/learn/out-of-band-xml-external-entity-oob-xxe/

https://www.youtube.com/watch?v=0hf3yAf5JZA

https://www.hackerone.com/knowledge-center/xxe-complete-guide-impact-examples-and-prevention

https://portswigger.net/burp/documentation/desktop/testing-workflow/input-validation/xxe-injection/blind

https://github.com/riyazwalikar/xxe-talk-null/blob/master/xxe.md

https://www.blackduck.com/blog/xml-external-entity-injection-opennms.html

https://www.cobalt.io/blog/how-to-execute-an-xml-external-entity-injection-xxe

https://www.indusface.com/blog/how-to-identify-and-mitigate-xxe-vulnerability/

https://www.youtube.com/watch?v=Qn2GwH3vjs8

https://www.brightsec.com/blog/xxe-attack/

https://www.intigriti.com/researchers/blog/hacking-tools/exploiting-advanced-xxe-vulnerabilities

https://exploit-notes.hdks.org/exploit/web/security-risk/blind-xxe/

https://www.invicti.com/learn/xml-external-entity-xxe/

https://www.acunetix.com/blog/articles/band-xml-external-entity-oob-xxe/

https://hackerone.com/reports/154096

https://github.com/payloadbox/xxe-injection-payload-list

https://www.thehacker.recipes/web/inputs/xxe-injection/

https://medium.com/%40mohamedtaha_42562/exploiting-blind-xxe-going-out-of-band-f04e3c1ea7ef

https://horizon3.ai/attack-research/disclosures/red-team-blog-cve-2022-28219/

https://forum.hackthebox.com/t/web-attacks-blind-xxe/255662

https://security.stackexchange.com/questions/196889/why-do-we-need-external-dtd-in-blind-xxe

https://arben.sh/bugbounty/Blind-XXE-CVE-2019-12154/

https://siunam321.github.io/ctf/portswigger-labs/XXE-Injection/xxe-3/

https://www.synack.com/exploits-explained/exploits-explained-second-order-xxe-exploitation/

https://www.reddit.com/r/cybersecurity/comments/17s7hi9/importance_of_stacking_entities_in_a_xxe/

https://blog.zsec.uk/blind-xxe-learning/

https://owasp.org/www-chapter-pune/meetups/2019/November/XXE_Exploitation.pdf

https://www.exploit-db.com/docs/49732

https://security.stackexchange.com/questions/245543/blind-xxe-exfiltration-data-via-oob

https://redfoxsec.com/blog/xml-external-entity-injectionsxxe-attacks/

https://www.naukri.com/code360/library/xxe-payloads

https://bugbase.ai/blog/demystifying-xxe-injection

https://bluegoatcyber.com/blog/blind-xxe-attacks/

https://sauceeeytheme.hashnode.dev/xml-external-entity-injection-payload-cheatsheet

https://swarm.ptsecurity.com/impossible-xxe-in-php/

https://hackmd.io/%40cheese00/HJNtPqw5T

https://shuciran.github.io/posts/XXE-Blind-Out-of-Band/

https://notes.incendium.rocks/pentesting-notes/web/injection/xxe

https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_Processing

https://smart7.in/2018/11/11/Understanding-XXE-from-Basic-to-Blind.html

https://gitlab.com/pentest-tools/PayloadsAllTheThings/-/tree/master/XXE%20Injection

https://medium.com/%40jhncdrcbautista/exploiting-blind-xxe-data-retrieval-via-error-messages-8b2ab6836edb

https://www.hahwul.com/cullinan/xxe/

https://www.hackingarticles.in/comprehensive-guide-on-xxe-injection/

https://shreyapohekar.com/blogs/blind-xxe-attacks-out-of-band-interaction-techniques-oast-to-exfilterate-data/

https://www.youtube.com/watch?v=ghCDCy588uI

https://www.ambionics.io/blog/oracle-peoplesoft-xxe-to-rce

https://www.4armed.com/blog/exploiting-xxe-with-excel/

https://red.tymyrddin.dev/docs/in/app/burp/xxe/4

https://ritik.dev/blog/xxe/

https://docs.netscaler.com/en-us/citrix-adc/current-release/application-firewall/top-level-protections/xml-entity-attack-protection.html

https://writeups.io/summaries/detailed-technical-analysis-of-from-blind-xxe-to-root-level-file-read-access/

https://the-pentesting-guide.marmeus.com/web/xxe

https://www.bugcrowd.com/glossary/xml-external-entity-injection-xxe/

https://www.synack.com/blog/a-deep-dive-into-xxe-injection/

https://www.youtube.com/watch?v=iqE7fObiNuU

https://red.tymyrddin.dev/docs/in/app/burp/xxe/3

https://www.youtube.com/watch?v=fgw_iFhKt6U

https://x.com/tbbhunter/status/1870069219703792080

https://www.youtube.com/watch?v=nyXjJ915keM

https://www.youtube.com/watch?v=tyoQ1QF9sMs

https://www.youtube.com/watch?v=AQUHzyzZXeA

https://0xdf.gitlab.io/

https://www.youtube.com/watch?v=aSiIHKeN3ys

https://tryhackme.com/room/owasptop10

https://www.youtube.com/watch?v=xjcSMFKVTW4

https://blog.csdn.net/u011721501/article/details/43775691

https://www.youtube.com/watch?v=wqwUqHA_AJE

https://academy.tcm-sec.com/p/practical-ethical-hacking-the-complete-course

https://www.youtube.com/watch?v=dpFkoypMYsc

https://www.sans.org/blog/exploiting-xxe-vulnerabilities-in-iis-net/

https://www.youtube.com/watch?v=tGVQckKQBFw

https://www.acunetix.com/blog/articles/xml-external-entity-xxe-vulnerabilities/

https://www.youtube.com/watch?v=RmUUhn6PMk4

https://www.youtube.com/watch?v=hA1vi-hISfo

https://www.youtube.com/watch?v=fw6R85_O12k

https://www.youtube.com/watch?v=99_eeZ-x_7E