wanderer/ PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-05-11 05:26:19 +02:00
Code Issues Releases Activity

Update README.md

This commit is contained in:
Alexandre ZANNI 2019-08-06 17:28:47 +02:00 committed by GitHub
parent bd449e9cea
commit 66c9d945b7
Signed by: GitHub
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
XXE Injection/README.md
View File

@ -32,6 +32,11 @@ Syntax: `<!ENTITY entity_name SYSTEM "entity_value">`
```
sudo ./xxeftp -uno 443 ./xxeftp -w -wps 5555
```
- [230-OOB](https://github.com/lc/230-OOB) and payload generation via [http://xxe.sh/](http://xxe.sh/)
```
$ python3 230.py 2121
```
## Detect the vulnerability
@ -306,4 +311,4 @@ GIF (experimental)
* [XXE in Uber to read local files](https://httpsonly.blogspot.hk/2017/01/0day-writeup-xxe-in-ubercom.html)
* [XXE by SVG in community.lithium.com](http://esoln.net/Research/2017/03/30/xxe-in-lithium-community-platform/)
* [XXE inside SVG](https://quanyang.github.io/x-ctf-finals-2016-john-slick-web-25/)
* [Pentest XXE - @phonexicum](https://phonexicum.github.io/infosec/xxe.html)
* [Pentest XXE - @phonexicum](https://phonexicum.github.io/infosec/xxe.html)