I decided to try another TryHackMe capture the flag room.  This time it was Mustacchio. This room involved one of the OWASP Top 10 vulnerabilities called A4:2017-XML External Entities (XXE).  This vulnerability, when exploited, can be used to expose internal files, that the user should not be allowed to