mail@christian-schneider.net
+49 178 3081340

About
Service
Application Pentest API Security Check Cloud Security Check Container Platform Review Attack Surface Mapping Secure SDLC Process Review Whitebox Analysis
Consulting
Agile Threat Modeling Attack Tree Quickstart Agentic AI Security Security Sparring Partner Security Architecture DevSecOps Pipeline Security Findings Assessment
Training
Web Security Bootcamp Review & Reflect Pentesting Training Live Hacking Event Custom Focus Session
Development
Attack Tree Threagile Workshop Board
Blog

XML

Generic XXE detection

12 Jul 2014

Generic XXE detection

Generic Detection of XML External Entity (XXE) Vulnerabilities.

api
architecture
attack-tree
browser
ci/cd
cloud
devops
genai
java
llm
mcp
pentesting
rag
red-team
secure-sdlc
supply-chain
threat-modeling
websocket
xml

Best Practice ·Conference ·Vulnerability

Christian Schneider
Application & AI Security Architect

Profile

Membership

OWASP – Open Worldwide Application Security Project

CCC – Chaos Computer Club

Allianz für Cybersicherheit

Contact

+49 178 3081340
mail@christian-schneider.net
Herbert-Lewin-Str. 3, 50931 Köln, Germany

Crypto

Preferred Messenger: Signal
S/MIME Mail: mail@christian-schneider.net
PGP-Key: 2898B0BE

Meta

Insured during project assignments: Exali IT Insurance
Tracking: Nope, visiting my website is cookieless.

Newsletter

Low-volume to announce new trainings, services, and conference talks (about four mails per year)

Service

Application Pentest
API Security Check
Cloud Security Check
Container Platform Review
Attack Surface Mapping
Secure SDLC Process Review
Whitebox Analysis

Consulting

Agile Threat Modeling
Attack Tree Quickstart
Agentic AI Security
Security Sparring Partner
Security Architecture
DevSecOps Pipeline
Security Findings Assessment

Training

Web Security Bootcamp
Review & Reflect
Pentesting Training
Live Hacking Event
Custom Focus Session

Development

Attack Tree
Threagile
Workshop Board

Copyright © 2026 by Christian Schneider

Imprint & Disclaimer