REFRENCES.md

Our workshop was based on many resources, here's the credits and refrences to them;

https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/

https://fr.gosecure.net/blog/2019/07/16/automating-local-dtd-discovery-for-xxe-exploitation/

https://github.com/GoSecure/dtd-finder

https://www.noob.ninja/2019/12/spilling-local-files-via-xxe-when-http.html

https://i.blackhat.com/us-18/Wed-August-8/us-18-Orange-Tsai-Breaking-Parser-Logic-Take-Your-Path-Normalization-Off-And-Pop-0days-Out-2.pdf

https://2018.zeronights.ru/wp-content/uploads/materials/20-Reverse-proxies-Inconsistency.pdf

https://www.elttam.com/blog/ruby-deserialization/

https://github.com/c0ny1/xxe-lab/blob/master/java_xxe/src/me/gv7/xxe/LoginServlet.java

https://blog.harshjaiswal.com/vimeo-ssrf-with-code-execution-potential/

https://swarm.ptsecurity.com/rce-in-f5-big-ip/

http://portswigger.net/

If you feel your resource is not credited please add PR.