diff --git a/src/pentesting-web/xxe-xee-xml-external-entity.md b/src/pentesting-web/xxe-xee-xml-external-entity.md
index 26b91d3cd..415facac7 100644
--- a/src/pentesting-web/xxe-xee-xml-external-entity.md
+++ b/src/pentesting-web/xxe-xee-xml-external-entity.md
@@ -763,6 +763,10 @@ XMLDecoder is a Java class that creates objects based on a XML message. If a mal
 </java>
 ```
 
+## XXE + WrapWrap + Lightyear + bypasses
+
+Take a look to this amazing report [https://swarm.ptsecurity.com/impossible-xxe-in-php/](https://swarm.ptsecurity.com/impossible-xxe-in-php/)
+
 ## Tools
 
 {{#ref}}