Loading...
Loading...
Found 3 Skills
Discovering and exploiting XML External Entity injection vulnerabilities to read server files, perform SSRF, and exfiltrate data during authorized penetration tests.
XXE playbook. Use when XML, SVG, OOXML, SOAP, or parser-driven imports may resolve external entities, files, or internal network resources.
XPath Injection is an attack technique used to exploit applications that construct XPath (XML Path Language) queries from user-supplied input to query or navigate XML documents. Automate XPath injection attacks to retrieve documents Advanced XPath Injection Tool A fork of xxxpwn using predictive text Xpath injection exploitation tool Similar to SQL injection, you want to terminate the query...