Exploiting XXE Using External Entities to Retrieve Files — PortSwigger Lab (opens in new tab)

How I used XML External Entity injection to read the contents of /etc/passwd from the server