SiteMapper — Blind parse

Scenario

The blind parser still resolves external entities but shows no file contents. Success is silent—a processed status without data leakage. Confirm entity expansion works even when nothing is reflected.

Your approach

1. Reuse the entity technique from the reflected parser lab.
2. Upload valid malicious XML to the blind endpoint.
3. Watch for a processed response without error messages.
4. Note the lab flag issued for successful blind parsing.
5. Submit that flag.