← All labs
Modern Level 7 / 8 Hard

XXE — XML Parsing

A parser reads XML you submit. Make it read a local file.

XML feedback endpoint

Submit feedback as XML; the server parses it and echoes your <message> back. A sample document is below.

Expected format

<?xml version="1.0"?> <feedback><message>Great labs!</message></feedback>

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.