EIP-2026-117568

This exploit demonstrates an XML External Entity (XXE) injection vulnerability in Microsoft Windows FxCop versions 10-12, allowing local file exfiltration or NTLM hash theft via a crafted .FxCop project file. The PoC includes a malicious DTD file hosted on an attacker-controlled server to exfiltrate file contents.