Baike.dev
All toolsOnline toolsAI codingTrendingOpen sourceNewsSubmit
Log in
< Back to tools
O

oxml_xxe

> 编程语言
Open source

A tool for embedding XXE/XML exploits into different filetypes

1.2K stars0 likes2 views
WebsiteGitHub

About

A tool for embedding XXE/XML exploits into different filetypes

oxml_xxe

This tool is meant to help test XXE vulnerabilities in OXML document file formats. Currently supported:

  • DOCX/XLSX/PPTX
  • ODT/ODG/ODP/ODS
  • SVG
  • XML

BH USA 2015 Presentation: Exploiting XXE in File Upload Functionality (Slides) (Recorded Webcast)

Blog Posts on the topic:

  • Exploiting XXE Vulnerabilities in OXML Documents
  • Exploiting CVE-2016-4264 With OXML_XXE

Installation

OXML_XXE was written in Ruby using Sinatra, Bootstrap, and Slim.

Docker

  1. Run docker build --tag oxml_xxe .
  2. Run docker run --name oxml_xxe -p 4567:4567 --rm oxml_xxe
  3. Browse to http://localhost:4567/ to get started.

Docker Compose

  1. Run docker-compose up --build
  2. Browse to http://localhost:4567/ to get started.

Ubuntu

Install dependencies:

bash
apt-get install -y make git libsqlite3-dev libxslt-dev libxml2-dev zlib1g-dev gcc ruby3.2 g++

Bundle install:

bash
gem install bundler
bundle install

Start the service:

bash
ruby server.rb

Examples

See: https://github.com/BuffaloWill/oxml_xxe/wiki/python-docx

Issues· 0 open

View all issuesOpen on GitHub

No open issues yet, or sync has not completed.

> Tags

Ruby

No comments yet. Be the first to share.

> Details

PublishedAug 1, 2026
UpdatedSep 17, 2026
Category编程语言
PricingOpen source

> Related tools

T
TypeScript
JavaScript 的超集，为前端与全栈提供静态类型
P
Python
通用编程语言，广泛用于 Web、数据与 AI
G
Go
Google 推出的简洁高效系统语言