> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Blind XXE with out-of-band interaction via XML parameter entities

> PortSwigger Web Security Academy lab: Blind XXE with out-of-band interaction via XML parameter entities. Topic: XXE (XML External Entity).

`$ tldr` PortSwigger · XXE (XML External Entity)

| · | · |
| - | - |
| Platform | PortSwigger Web Security Academy |
| Topic | XXE (XML External Entity) |
| Difficulty | PRACTITIONER |
| Official lab | [Open](https://portswigger.net/web-security/xxe/blind/lab-xxe-with-out-of-band-interaction-using-parameter-entities) |

## Solve the lab

| Language | Author | Format | Link |
| - | - | - | - |
| 🇬🇧 EN | **PortSwigger** | Texto | [Open](https://portswigger.net/web-security/xxe/blind/lab-xxe-with-out-of-band-interaction-using-parameter-entities) |

## Resources by skill

| Skill | Source | Link |
| - | - | - |
| XML External Entity | HackTricks | [Open](https://book.hacktricks.wiki/en/pentesting-web/xxe-xee-xml-external-entity.html) |

## Related skills

[XML External Entity](/en/skills/xxe)

***

## Comments & tips

Solved this lab a different way? Share it here — comments live in [GitHub Discussions](https://github.com/FFuson/HTB_Writeups/discussions).

*Last updated: 2026-05-08*


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.