Lab: Exploiting XXE to retrieve data by repurposing a local DTD