Hack pra 05-12-blind-xxe
ONsec PHDays 2012 XXE incapsulated report
Attacks against Microsoft network web clients