It is in the Request.InputStream
You read it like you would any other stream. In your case, the StreamReader class or perhaps the XmlDocument.Load method. Make sure you trap the reading of the stream in error handling just in case someone misuses your .aspx/ashx page and sends invalid xml.