Web security testing (4): XML injection and code injection

I. Introduction

Combining internal data and collaborating with colleagues in the security penetration department, the security testing related information tutorials are comprehensively covering security testing in e-commerce, payment, finance, network, database and other fields, covering Web, APP, middleware, internal and external networks, Linux, Windows multiple platforms. After completing the course, you will definitely become a security master!
For all articles, please visit the column: "Full Stack Security Testing Tutorial (0 Basics)"

Through this chapter, we will learn:

1. XML injection concept
2. Understand what XML injection vulnerabilities are
3. Understand the causes of XML injection vulnerabilities
4. XML injection vulnerability detection and protection
5. Understand how to exploit XML injection vulnerabilities
6. Master how to fix XML injection vulnerabilities
7. Code injection concept
8. Types and defenses of code injection

---