Refer to the following steps:
- Browse to http://192.168.56.11/mutillidae/index.php?page=xml-validator.php.
- It say it is an XML validator. Let's try to submit the example test and see what happens. In the XML box, put <somexml><message>Hello World</message></somexml> and click Validate XML. It should only display the message Hello World in the parsed section:
- Now, let's see whether it processes entities correctly. Enter the following:
<!DOCTYPE person [ <!ELEMENT person ANY> <!ENTITY person "Mr Bob"> ]> <somexml><message>Hello World &person;</message></somexml>
Here, we only defined an entity and set the value Mr Bob to ...