Out-of-Band XXE tool
A python script to achieve file read via FTP!
230OOB is a tool that emulates an FTP server, assisting you in achieving file read via Out-of-Band XXE.
git clone https://github.com/lc/230-OOB
Generate an XXE payload & DTD at http://xxe.sh
Start the server:
python3 230.py 2121
everything will be logged to -> extracted.log