mission · xxe-basic-entities
The XML Viewer That Obeys You
DropZone is a developer tool that pretty-prints XML documents. Paste XML in, get a tidy tree out. Under the hood the preview runs every XML you give it through its parser — including any DOCTYPE and entities you declare. Start by learning how XML entities work, then make the app resolve one of your own.
objective
Define a custom entity in a DOCTYPE and make DropZone resolve it inside your XML.
XML Viewer
Paste an XML document and DropZone pretty-prints it for you. Documents are parsed server-side — that's what lets us show you the resolved structure.
Paste your XML document
XML, XHTML, SVG… anything the parser can read.
Simulated target for training. This page is the vulnerable website — payloads you craft execute here in your browser. Practice only on systems you own or are authorized to test.