Hello,
Im currently trying to learn XXE and i've been trying this particular one for hours now without much luck.
I have to read from a file on the machine using XXE. All i have is the below xml:
<?xml version='1.0' encoding='UTF-8'?>
<note>
<to>Murphy</to>
<from>Duck</from>
<heading>Meeting</heading>
<body>We are meeting at my house this weekend</body>
</note>
I've tried to inject different payloads such as <!DOCTYPE foo [<!ENTITY file SYSTEM "file:////etc/passwd" >]> and lots of variants but no luck.
Should i be trying to inside <body> etc or should I add it outside of that? I've tried everything from OWASP website, random cheatsheets to youtube videos with no luck..
Some guidance?
Thanks
Im currently trying to learn XXE and i've been trying this particular one for hours now without much luck.
I have to read from a file on the machine using XXE. All i have is the below xml:
<?xml version='1.0' encoding='UTF-8'?>
<note>
<to>Murphy</to>
<from>Duck</from>
<heading>Meeting</heading>
<body>We are meeting at my house this weekend</body>
</note>
I've tried to inject different payloads such as <!DOCTYPE foo [<!ENTITY file SYSTEM "file:////etc/passwd" >]> and lots of variants but no luck.
Should i be trying to inside <body> etc or should I add it outside of that? I've tried everything from OWASP website, random cheatsheets to youtube videos with no luck..
Some guidance?
Thanks