mission · xxe-file-converter
The Converter That Coughs Up Files
DropZone's flagship feature: upload a Word document (.docx) or an XML file and it converts it to PDF or plain text. A .docx is a ZIP of XML files, and the conversion engine parses every one of them. It also supports XML uploads directly for 'spreadsheet import'. The converter needs to read files on the server to work — so it has file access built in.
objective
Read a file on the server by submitting an XML document to the converter (try the app's own config, e.g. /opt/dropzone/config.xml).
Document Converter
DropZone converts .docx, .xml and .csv files between formats. The conversion engine parses every document server-side.
Drop your file
.docx (XML inside), .xml, .csv — convert to PDF or plain text.
The converter echoes the parsed document as plain text.
Simulated target for training. This page is the vulnerable website — payloads you craft execute here in your browser. Practice only on systems you own or are authorized to test.