EncryptCodecencryptcodec
Simulations/XML Bomb

XML Bomb (Billion Laughs)

Intermediate

XML entity expansion can be weaponized to consume exponential memory. Craft a Billion Laughs payload to crash the parser, then configure defenses to prevent it.

Progress:
1
Billion Laughs
2
Configure Defenses

XML Input

Server Memory Usage
0 MB / 3,072 MB
Parser Settings
Max Entitiesunlimited
Max Nesting Depthunlimited

Challenges

1
Billion Laughs
Construct an XML bomb that causes exponential entity expansion and consumes excessive memory.
▼ hints
2
Configure Defenses
Set the correct parser settings to prevent XML bomb attacks.
▼ hints
How to fix XML bombs
Disable DTDs or limit entity expansion to prevent exponential blowup
▼

Frequently Asked Questions