Easy
XXE
InvoicePilot XML import file read
A freelance invoicing tool. Uploaded invoice XML is parsed with external entity loading left on.
PentestingHere Academy
Official Academy lab
- Attempts
- 1
- Solves
- 0
- Published
- 25 Aug 2026
Scenario
InvoicePilot lets freelancers import invoices as XML, and echoes the parsed total back on the confirmation page.
Goal
Read the server-side file /etc/invoicepilot/build-notes.txt (it holds the flag) and have its contents reflected back on the confirmation page.