Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications.
……Disclaimer
This repository contains tool developed strictly for educational purposes. Any misuse of the tool for illegal activities is strictly prohibited.
Legal Notice
It is important to understand and comply with all local laws and regulations related to cybersecurity and ethical hacking. Unauthorized access to computer systems, networks, or data is illegal and punishable by law. The developer of this repository is not responsible for any misuse of the tools contained herein.
By using the tools in this repository, you agree to use them responsibly and ethically. Always obtain explicit permission before testing or attempting to access any network, system, or data that does not belong to you.
No open issues yet, or sync has not completed.