> For the complete documentation index, see [llms.txt](https://sayonara.gitbook.io/writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sayonara.gitbook.io/writeups/portswigger/xxe-xml-external-entities/blind-xxe-with-out-of-band-interaction.md).
# Blind XXE with out-of-band interaction
## Exploitation
the lab has a "check stock" feature that parses XML input
send to repeater
this is a blind XXE
let's open collaborator in burp suite and get a url and try to issue a DNS lookup to this url to make sure that this website is vulnerable to blind XXE
This XXE attack causes the server to make a `back-end HTTP` request to the specified URL (collaborator URL). The attacker can monitor for the resulting DNS lookup and HTTP request, and thereby detect that the XXE attack was successful.
```markup
]>
&xxe;1
```
so the attack is successfull because the backend server of the website issued a DNS lookup to the attacker server so the website is vulnerable to blind XXE.
hope you found this walkthrough easy to understand and follow
Greeting From [**Sayonara**](https://github.com/ismail-arame)
