Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
A tool for embedding XXE/XML exploits into different filetypes
翻译 - 用于将XXE / XML漏洞嵌入不同文件类型的工具
一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo
🎯 XML External Entity (XXE) Injection Payload List
A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
Tool to help exploit XXE vulnerabilities
A mini webserver with FTP support for XXE payloads
A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
XXE Out of Band Server.
Spring Boot Actuator (jolokia) XXE/RCE
Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a playground to teach or test with Vulnerability scanners / WAF ru...
Toolkit to detect and keep track on Blind XSS, XXE & SSRF
翻译 - 用于检测和跟踪Blind XSS，XXE和SSRF的工具包
Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
翻译 - 商品注入签名，恶意输入，XSS，HTTP标头注入，XXE，RCE，Javascript，XSLT
Spring Boot Actuator未授权访问【XXE、RCE】单/多目标检测
Python XXE 漏洞复现 flask作为后台
CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.
翻译 - CollabOzark是一个简单的工具，可帮助研究人员跟踪SSRF，RCE，Bind XSS，XXE，外部资源访问有效负载触发器。
Automated penetration and auxiliary systems, providing XSS, XXE, DNS log, SSRF, RCE, web netcat and other Servers,gin-vue-admin，online https://51pwn.com