XXE : Finding and Exploiting XML External Entity Vulnerabilities

From understanding how XML entities work to blind out-of-band exfiltration and the hidden attack...