sql注入 https://github.com/Audi-1/sqli-labs 上传漏洞 https://github.com/c0ny1/upload-labs XSS https://github.com/do0dl3/xss-labs XXE(XML External Entity Injection)即XML外部实体注入 https://github.com/c0ny1/xxe-lab