Medium
XXE
InvoicePilot import (XXE)
An invoice XML importer resolves external entities, so a crafted document reads local files.
PentestingHere Academy
Official Academy lab
- Attempts
- 2
- Solves
- 1
- Published
- 6 Sep 2026
Scenario
InvoicePilot imports invoices as XML: you paste an XML document and it parses out the customer name and shows it back to you.
Goal
Read the archived flag file on the server and submit its contents. The importer archives
files under /tmp/data/ (see the home page).