Test files › Structured data › billion-laughs.xml
Sample XML file
Classic entity-expansion bomb: nine levels of entities each referencing the previous ten times. Under 1 KB on disk, expands to ~1 GB of text if entity expansion is unbounded.
↓ Download billion-laughs.xml| Filename | billion-laughs.xml |
| Format | XML |
| Size | 794 bytes (794 bytes) |
| MIME type | application/xml |
| SHA-256 | 9ca01fc0e877f248ff50f66de22330cbfb71785e34f26656cf68a0aac21f642c |
What this file catchesParsers without an entity-expansion limit. A hardened parser rejects this in milliseconds; a vulnerable one consumes all available memory.
Download & verify
curl -fsSL -o "billion-laughs.xml" "https://files.hexaqa.com/xml/billion-laughs.xml"
curl -fsSL "https://files.hexaqa.com/xml/billion-laughs.xml" | sha256sum
# expect: 9ca01fc0e877f248ff50f66de22330cbfb71785e34f26656cf68a0aac21f642c