mail@christian-schneider.net
+49 178 3081340

About
Service
Application Pentest Cloud Security Check Container Platform Review Attack Surface Mapping Secure SDLC Process Review Whitebox Analysis
Consulting
Agile Threat Modeling Vulnerability Assessment DevSecOps Pipeline Security Architecture Ask-me-Anything Series
Training
Web Security Bootcamp Pentesting Training Live Hacking Event Custom Mini Session
Development
AttackTree: Free SaaS Edition AttackTree: Custom SaaS Edition AttackTree: Self-Hosted Edition Threagile: Support Subscription Micro Attack Simulation: Toolkit
Blog

XML

Home

Vulnerability

Generic XXE Detection

on 12 Jul 2014

Generic XXE Detection

Generic Detection of XML External Entity (XXE) Vulnerabilities.

Latest Articles

12 Steps to Secure Software

13 Apr 2024

Micro Attack Simulations

20 Oct 2023

Handling Log4Shell vulnerability

18 Dec 2021

all Categories

Best Practice
Conference
Vulnerability

all Tags

agile
attack-tree
chrome
cloud
dependencies
deserialization
devsecops
faq
java
pentesting
process
red-team
secure-sdlc
simulation
strategy
tool
video
web
websocket
xml

Christian Schneider
Security Architect, Hacker, Trainer

Profile

Membership

OWASP – Open Worldwide Application Security Project

CCC – Chaos Computer Club

Allianz für Cybersicherheit

Contact

+49 178 3081340
mail@christian-schneider.net
Herbert-Lewin-Str. 3, 50931 Köln, Germany

Crypto

Preferred Messenger: Signal
S/MIME Mail: mail@christian-schneider.net
PGP-Key: 2898B0BE

Meta

Insured during project assignments: Exali IT Insurance
Tracking: Nope, visiting my website is cookieless.

Newsletter

Low-volume to announce new trainings, services, and conference talks (about six mails per year)

Service

Application Pentest
Cloud Security Check
Container Platform Review
Attack Surface Mapping
Secure SDLC Process Review
Whitebox Analysis

Consulting

Agile Threat Modeling
Vulnerability Assessment
DevSecOps Pipeline
Security Architecture
Ask-me-Anything Series

Training

Web Security Bootcamp
Pentesting Training
Live Hacking Event
Custom Mini Session

Development

AttackTree: Free SaaS Edition
AttackTree: Custom SaaS Edition
AttackTree: Self-Hosted Edition
Threagile: Support Subscription
Micro Attack Simulation: Toolkit

Copyright © 2024 by Christian Schneider

Imprint & Disclaimer