HACKR.GG
LabsDocument Parser
XXEHard

Document Parser

DocParser accepts XML uploads and processes them server-side. Inject an XXE payload to make the parser read local files and exfiltrate their contents.

↗ View walkthrough
// Machine control
Checking session...
// Submit flag