add an article

yuttasakcom · Feb 26, 2018 · 7c4696e · 7c4696e
1 parent aa7b52d
commit 7c4696e
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 0 deletions.
diff --git a/README-jp.md b/README-jp.md
@@ -54,6 +54,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
   - [SQL Injection](#tricks-sql-injection)
   - [NoSQL Injection](#tricks-nosql-injection)
   - [FTP Injection](#tricks-ftp-injection)
+  - [XXE](#tricks-xxe)
   - [SSRF](#tricks-ssrf)
   - [Header Injection](#tricks-header-injection)
   - [URL](#tricks-url)
@@ -305,6 +306,11 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
 - [XML Out-Of-Band Data Retrieval](https://media.blackhat.com/eu-13/briefings/Osipov/bh-eu-13-XML-data-osipov-slides.pdf) - Written by [@a66at](https://twitter.com/a66at) and Alexey Osipov.
 - [XXE OOB exploitation at Java 1.7+](http://lab.onsec.ru/2014/06/xxe-oob-exploitation-at-java-17.html) - Written by [Ivan Novikov](http://lab.onsec.ru/).
 
+<a name="tricks-xxe"></a>
+### XXE
+
+- [Evil XML with two encodings](https://mohemiv.com/all/evil-xml/) - Written by [Arseniy Sharoglazov](https://mohemiv.com/).
+
 <a name="tricks-ssrf"></a>
 ### SSRF
 

diff --git a/README-zh.md b/README-zh.md
@@ -54,6 +54,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
   - [SQL Injection](#tricks-sql-injection)
   - [NoSQL Injection](#tricks-nosql-injection)
   - [FTP Injection](#tricks-ftp-injection)
+  - [XXE](#tricks-xxe)
   - [SSRF](#tricks-ssrf)
   - [Header Injection](#tricks-header-injection)
   - [URL](#tricks-url)
@@ -331,6 +332,11 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
 - [XML Out-Of-Band Data Retrieval](https://media.blackhat.com/eu-13/briefings/Osipov/bh-eu-13-XML-data-osipov-slides.pdf) - Written by [@a66at](https://twitter.com/a66at) and Alexey Osipov.
 - [XXE OOB exploitation at Java 1.7+](http://lab.onsec.ru/2014/06/xxe-oob-exploitation-at-java-17.html) - Written by [Ivan Novikov](http://lab.onsec.ru/).
 
+<a name="tricks-xxe"></a>
+### XXE
+
+- [Evil XML with two encodings](https://mohemiv.com/all/evil-xml/) - Written by [Arseniy Sharoglazov](https://mohemiv.com/).
+
 <a name="tricks-ssrf"></a>
 ### SSRF
 

diff --git a/README.md b/README.md
@@ -54,6 +54,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
   - [SQL Injection](#tricks-sql-injection)
   - [NoSQL Injection](#tricks-nosql-injection)
   - [FTP Injection](#tricks-ftp-injection)
+  - [XXE](#tricks-xxe)
   - [SSRF](#tricks-ssrf)
   - [Header Injection](#tricks-header-injection)
   - [URL](#tricks-url)
@@ -302,6 +303,11 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
 - [XML Out-Of-Band Data Retrieval](https://media.blackhat.com/eu-13/briefings/Osipov/bh-eu-13-XML-data-osipov-slides.pdf) - Written by [@a66at](https://twitter.com/a66at) and Alexey Osipov.
 - [XXE OOB exploitation at Java 1.7+](http://lab.onsec.ru/2014/06/xxe-oob-exploitation-at-java-17.html) - Written by [Ivan Novikov](http://lab.onsec.ru/).
 
+<a name="tricks-xxe"></a>
+### XXE
+
+- [Evil XML with two encodings](https://mohemiv.com/all/evil-xml/) - Written by [Arseniy Sharoglazov](https://mohemiv.com/).
+
 <a name="tricks-ssrf"></a>
 ### SSRF