Most of examples for extracting files through XXE OOB (Out of Band) sets up a listening HTTP server and listens to incoming request on the URL requested. However, since the URL length is limited to something like 2048, how would you extract larger files through this method, or other OOB methods? Is it possible to perform POST request through XXE OOB?

  • Hello and welcome to Stack Exchange. That's a fantastic first question! – MechMK1 Aug 12 at 12:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.