xxe 开源项目推荐（115 个）

reddelexc /hackerone-reports

Top disclosed reports from HackerOne

JoyChou93 /java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

whitel1st /docem

一个将XXE和XSS有效载荷嵌入docx、odt、pptx、xlsx文件的工具（oxml_xxe加强版）

GoSecure /dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

luisfontes19 /xxexploiter

Tool to help exploit XXE vulnerabilities

Li4n0 /revsuit

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

chennqqi /godnslog

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

zer0yu /Berserker

A list of useful payloads for Web Application Security and Pentest/CTF

JoyChou93 /sks

Security Knowledge Structure(安全知识汇总)

alibaba /seckit

阿里巴巴安全SDK，提供SSRF、JDBC、XXE防护能力

HLOverflow /XXE-study

This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a playground to teach or test with Vulnerability scanners / WAF rules / Secure Configuration settings.

kljunowsky /XXElixir

This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.

k8gege /ZimbraExploit

Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)

ztgrace /mole

Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.

cokeBeer /go-sec-code

Go-sec-code is a project for learning Go vulnerability code.

deanf1 /dotnet-security-unit-tests

A web application that contains several unit tests for the purpose of .NET security

yuriisanin /svg2raster-cheatsheet

A cheatsheet for exploiting server-side SVG rasterization.

OlivierLaflamme /Auditing-Vulnerabilities

In this repository I'll host my research and methodologies for auditing vulnerabilities

ptonewreckin /BlindRef

BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework

hannob /invoicesec

Security test suite for electronic invoices