skills.rest
bingook
bingookCOMMUNITY
Explore all skills by this author →
GitHub

expression-language-injection

Detect and exploit Expression Language injection vulnerabilities in Java frameworks.

Updated Aug 23, 2026
Search Tags:#RCE#Java EL#SpEL#OGNL#EL injection#Java frameworks
One-click install
npx skills add https://github.com/bingook/bingo --skill expression-language-injection-bingook
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: expression-language-injection
Source: https://github.com/bingook/bingo/tree/main/bingo/skills/hack-skills/expression-language-injection
Command: npx skills add https://github.com/bingook/bingo --skill expression-language-injection-bingook

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert-level techniques for detecting and exploiting Expression Language (EL) injection vulnerabilities in Java frameworks like Spring, Struts2, Confluence, and others.

Core Features & Use Cases

  • Detection: Identifies EL injection vulnerabilities using polyglot probes.
  • Exploitation: Demonstrates RCE via SpEL, OGNL, and Java EL with examples.
  • Bypass Techniques: Shows how to bypass sandboxes and blacklists.
  • CVE Analysis: Provides examples of CVEs like S2-045, S2-046, and CVE-2021-26084.

Quick Start

Use the 'expression-language-injection' skill to test for EL injection vulnerabilities in your Java application.

Frequently Asked Questions about expression-language-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect EL injection vulnerabilities in Java frameworks?▼

You can detect EL injection vulnerabilities in Java frameworks by using polyglot probes to identify unsafe evaluation contexts in environments like Spring, Struts2, and Confluence.

How can I achieve RCE through SpEL or OGNL injection?▼

RCE through SpEL or OGNL injection is achieved by injecting malicious expressions into vulnerable evaluation contexts, which the framework executes to run arbitrary system commands.

How do I bypass sandboxes and blacklists in Java EL injection?▼

Bypassing sandboxes and blacklists in Java EL injection involves using specific expression syntax and reflection techniques to circumvent runtime restrictions and execute blocked payloads.

What CVEs are associated with OGNL and SpEL injection exploits?▼

Notable CVEs associated with OGNL and SpEL injection include S2-045, S2-046 in Struts2, and CVE-2021-26084 in Confluence, which demonstrate remote code execution via improper expression evaluation.

Do I need prior knowledge of Java frameworks to test for EL injection?▼

Yes, testing for EL injection requires prerequisite knowledge of Java frameworks and EL injection mechanisms to understand evaluation contexts and craft effective payloads.

Related Skills

Explore More Software Engineering Skills→
partme-aipartme-ai
610

spring-boot

Guide Spring Boot project creation, configuration, and development.

Official
Intermediate
AeonDaveAeonDave
15

lfisuite

Automate LFI vulnerability testing and exploitation to achieve remote code execution.

Community
Advanced
giosuetedeschi-specgiosuetedeschi-spec

API Fuzzing for Bug Bounty

Fuzz REST, SOAP, and GraphQL APIs to detect IDOR, injection, and authentication bypasses.

Community
Advanced
Q16GQ16G
83

stored-xss-detection

Trace storage XSS risk chains from source to render sinks.

Community
Advanced