Willis Vandevanter

currently: ai security engineer

previously: Trail of Bits, R7, Google SoC. Multiple startups. Ran my own consultancy for 5.5 years

GitHub
LinkedIn
RSS
Blog Posts
Presentations + Trainings
Advisories
Search
Archives
1. Dark Mode

Search

Archives

2026 2025 2022 2019 2018 2016 2015 2014

Tags

agents active defense mcp prompt injection threat modeling c2 exploitation xxe ssrf protocol smuggling graphql upload ldap automation recon

Tags

14 pages

Exploitation

Exploiting XXE In File Upload Functionality

Sunday, May 1, 2016

Exploiting XXE In File Upload Functionality

XML Entity Cheatsheet - Updated

Thursday, December 24, 2015

XML Entity Cheatsheet - Updated

Exploiting XXE Vulnerabilities in OXML Documents - Part 1

Wednesday, March 4, 2015

Exploiting XXE Vulnerabilities in OXML Documents - Part 1

XML Entity Cheatsheet

Wednesday, September 3, 2014

XML Entity Cheatsheet

© 2014 - 2026 Willis Vandevanter