xxe-injection 开源项目推荐（42 个）

whitel1st /docem

一个将XXE和XSS有效载荷嵌入docx、odt、pptx、xlsx文件的工具（oxml_xxe加强版）

TheTwitchy /xxer

A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.

YalcinYolalan /WSSAT

WEB SERVICE SECURITY ASSESSMENT TOOL

dragonked2 /Egyscan

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

HLOverflow /XXE-study

This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a playground to teach or test with Vulnerability scanners / WAF rules / Secure Configuration settings.

kljunowsky /XXElixir

This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.

deanf1 /dotnet-security-unit-tests

A web application that contains several unit tests for the purpose of .NET security

payload-box /xxe-injection-payload-list

XML External Entity (XXE) Injection Payload List

samuel-knutson /dotnet-xxe-learning-tests

Quick tests to evaluate the safety of various .NET XML Parsers with respect to XXE injection

SVelizDonoso /xvwa

XVWA es una aplicación Web mal Desarrollada en PHP / MySQL que ayuda a los entusiastas de la seguridad a aprender la seguridad de las aplicaciones WEB. No es recomendable alojar esta aplicación en línea, ya que está diseñada para ser "Extremadamente Vulnerable". Recomendamos alojar esta aplicación en un entorno local/controlado. El fin es que pu…

hannoch /python-xxe

Python XXE 漏洞复现 flask作为后台

shinmao /SecurityLearning

For Web Security

FrancescoDiSalesGithub /XXE-gen

XXE vulnerability creator

LinuxUser255 /Web-Security-Academy-Series

Exploit Code, notes, and resources to accompany PortSwiggers' WebAcademy Labs.

TheWation /XXESandbox

The PHP sandbox environment is a Docker-based tool for testing XML processing code, with XXE vulnerabilities demonstrated and security considerations explained.

devrohaan /kick-off-OWASP_WebApp_Security_Vulnerabilities

Want to keep your Web application from getting hacked? Here's how to get serious about secure apps. So let's do it! Open Friday, Aug 2016 - Presentation Notes.

M3l0nPan /wordpress-cve-2021-29447

Exploit WordPress Media Library XML External Entity Injection (XXE) to exfiltrate files.

mrmtwoj /WAFManis

WAFManis is a Protocol-Level WAF Evasion Fuzzing Tool that automates the discovery of evasion vulnerabilities in Web Application Firewalls (WAFs) by fuzzing HTTP requests to identify potential bypass techniques.

dev /xxe-payload-generator

该项目在 GitHub 上没有填写描述

rohitajariwal /web-app-security-scanner

A web crawler and vulnerability scanner tool developed by Rohit Ajariwal