A $7.500 BUG Bounty Bug Explained, Step by Step. (BLIND XXE OOB Over DNS)

Have you ever wondered what a $7.500 Bug Bounty bug looks like? In this vlog il walk you through a BLIND XXE OOB over DNS bug on a super hardened target and teach you how to exploit it. The tool used in this video to create the initial XML/PDF payload is @floyd_ch’s amazing file upload scanner, use it for you automation

Other useful links:

Bug Bounty of band entity XXE XXE with local DTD all music is licensed from epidemic sound, and the REDACTED target is on non disclosure, so this is as good as it gets.

Source: www.youtube.com