XXE Lab 1: Exploiting XXE using external entities to retrieve files