├── .gitignore ├── LICENSE ├── README.md ├── evil.dtd ├── sample-payloads ├── cdata.xml ├── dirlist.xml ├── hostname.xml ├── initial.json └── initial.xml ├── xxe-example ├── pom.xml └── src │ └── main │ ├── java │ └── com │ │ └── gdssecurity │ │ └── xxe │ │ ├── User.java │ │ └── UserHandler.java │ └── webapp │ ├── META-INF │ └── MANIFEST.MF │ └── WEB-INF │ └── web.xml └── xxeclient.py /.gitignore: -------------------------------------------------------------------------------- 1 | .DS_Store 2 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/README.md -------------------------------------------------------------------------------- /evil.dtd: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /sample-payloads/cdata.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/sample-payloads/cdata.xml -------------------------------------------------------------------------------- /sample-payloads/dirlist.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/sample-payloads/dirlist.xml -------------------------------------------------------------------------------- /sample-payloads/hostname.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/sample-payloads/hostname.xml -------------------------------------------------------------------------------- /sample-payloads/initial.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/sample-payloads/initial.json -------------------------------------------------------------------------------- /sample-payloads/initial.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/sample-payloads/initial.xml -------------------------------------------------------------------------------- /xxe-example/pom.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/xxe-example/pom.xml -------------------------------------------------------------------------------- /xxe-example/src/main/java/com/gdssecurity/xxe/User.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/xxe-example/src/main/java/com/gdssecurity/xxe/User.java -------------------------------------------------------------------------------- /xxe-example/src/main/java/com/gdssecurity/xxe/UserHandler.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/xxe-example/src/main/java/com/gdssecurity/xxe/UserHandler.java -------------------------------------------------------------------------------- /xxe-example/src/main/webapp/META-INF/MANIFEST.MF: -------------------------------------------------------------------------------- 1 | Manifest-Version: 1.0 2 | Class-Path: 3 | 4 | -------------------------------------------------------------------------------- /xxe-example/src/main/webapp/WEB-INF/web.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/xxe-example/src/main/webapp/WEB-INF/web.xml -------------------------------------------------------------------------------- /xxeclient.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/strozfriedberg/xxe-recursive-download/HEAD/xxeclient.py --------------------------------------------------------------------------------