[freebreakfast]

There is a YouTuber, STÖK, who makes videos explaining how he discovers some vulnerabilities. He actually has a video where he relied on an xxe vulnerability in an PDF file to snag passwd/shadow.[0]

0. https://www.youtube.com/watch?v=aSiIHKeN3ys