New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

C#版本注入获取文件信息失败 #5

Open

ywyonui opened this issue Apr 2, 2021 · 0 comments

ywyonui commented Apr 2, 2021 •

edited

Loading

String xmlData ="<!DOCTYPE a[<!ENTITY xxe SYSTEM \"file:///D:/log.txt\">]>" + "<user><username>&xxe;</username><password>admin</password></user>";

直接在代码中写这个执行LoadXml 无法返回xxe
使用doc获取到对应的节点内容是空的，也就是没有把文件内容读取出来存到对应的节点中
这是什么原因呢？.net修复了？

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment