+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: XXE Not working (/showthread.php?tid=6027110)
XXE Not working - ImTrying - Nov 22, 2019
Hello,
Im currently trying to learn XXE and i've been trying this particular one for hours now without much luck.
I have to read from a file on the machine using XXE. All i have is the below xml:
<?xml version='1.0' encoding='UTF-8'?>
<note>
<to>Murphy</to>
<from>Duck</from>
<heading>Meeting</heading>
<body>We are meeting at my house this weekend</body>
</note>
I've tried to inject different payloads such as <!DOCTYPE foo [<!ENTITY file SYSTEM "file:////etc/passwd" >]> and lots of variants but no luck.
Should i be trying to inside <body> etc or should I add it outside of that? I've tried everything from OWASP website, random cheatsheets to youtube videos with no luck..
Some guidance?
Thanks