Locate XML parsing entry points and validate XXE file disclosure, OOB callbacks, or SSRF.
npx skills add https://github.com/AKasem1/claude-bug-bounty --skill hunt-xxe
Please help me install this Agent Skill. Skill: hunt-xxe Source: https://github.com/AKasem1/claude-bug-bounty/tree/main/skills/hunt-xxe Command: npx skills add https://github.com/AKasem1/claude-bug-bounty --skill hunt-xxe
XXE vulnerabilities can let attackers coerce a vulnerable XML parser into reading sensitive files, triggering out-of-band callbacks, or reaching internal services via SSRF.
Use the hunt-xxe skill against the target and verify an XXE impact path by testing a known XML endpoint and attempting a short in-band entity payload for file disclosure or, if blocked, a blind OOB callback.
High-intent search queries and answers about installing and using this skill.
To find and validate XXE vulnerabilities, locate XML parsing entry points in XML APIs and test for external entity expansion leading to file disclosure, out-of-band callbacks, or SSRF to internal services.
When in-band reflection is blocked, escalate blind XXE testing using out-of-band DNS or HTTP callbacks to confirm external entity processing and validate impact via OOB exfiltration channels.
Yes, this approach targets XML-heavy backends including SAML/SSO endpoints with XML-based assertions and SOAP/WSDL services to identify and validate external entity vulnerabilities.
Yes, XXE testing works against server-side document processing or uploads that re-parse XML containers like DOCX, XLSX, and SVG files where XML parsing may be hidden inside conversions.
After confirming XXE file read, pivot by attempting SSRF to internal destinations such as cloud instance metadata endpoints, documenting the exploit path from file read to internal access.
Produce a defensible bug bounty report by documenting the full exploit path from file read to SSRF and applying reproducibility and severity gates so findings are triage-ready.
ricardoo022Identify configurations, secrets, and attack-surface exposure from JS-bundled web applications.
jinyimeng01Validate suspected web vulnerabilities and generate structured exploit reports.
ok-helloworldDetect and exploit XXE vulnerabilities for file disclosure and blind OOB exfiltration.
zebbernAutomate red-team reconnaissance and vulnerability discovery workflows.
