[NCTF2019]FakeXMLcookbook代码处找到题目也提示了是xxe,我们抓包搞一下<?xmlversion="1.0"encoding="utf-8"?><!DOCTYPEhack[<!ENTITYxxe"hack">]><user><username>&xxe;</username><password>123&