In this section, we're going to cover XXE or XML External Entity Injection.

According to OWASP Top 10, this is the fifth most common security threat or vulnerability within the tested websites, with 90% of the tested websites being vulnerable to it.

Now, this actually moved from number 6 to number 5 and more and more websites are actually being discovered with these vulnerabilities.

That's why chances are as time goes by, this might actually move up the list.

GitHub and twitter were actually vulnerable to this vulnerability before with twitter paying $10,000 to the hunter that discovered it.

So as usual, keep your eyes open, stay focused, practice what I'm going to show you and you'll be discovering them and cashing out some bounties in no time.