Detect and validate XML External Entity vulnerabilities in web applications and API gateways.
npx skills add https://github.com/pdparchitect/rook --skill hunt-xxe-pdparchitect
Please help me install this Agent Skill. Skill: hunt-xxe Source: https://github.com/pdparchitect/rook/tree/main/skills/hunt-xxe Command: npx skills add https://github.com/pdparchitect/rook --skill hunt-xxe-pdparchitect
This skill addresses the difficulty of identifying and verifying XML External Entity (XXE) vulnerabilities, which are often hidden in complex API integrations, file uploads, and legacy document processing services.
Use the hunt-xxe skill to audit the target API endpoint for XML injection vulnerabilities and verify potential blind OOB exfiltration paths.
High-intent search queries and answers about installing and using this skill.
To detect XXE vulnerabilities in API gateways, systematically identify XML entry points and test for insecure parser configurations using multi-stage payloads. This confirms exposure to entity expansion across XML-consuming endpoints.
Verifying blind XXE requires automating out-of-band (OOB) callbacks to confirm data exfiltration paths. This process validates vulnerabilities by executing payloads that trigger external requests without returning data directly.
Yes, you can test XML External Entity attacks on SAML and SOAP services. The technique targets these legacy document processing services to detect insecure parser configurations and validate entity expansion.
You can exploit XXE to achieve SSRF by executing multi-stage payloads that force the XML parser to interact with internal services. This demonstrates impact by facilitating internal service compromise and file exfiltration.
File upload functionality exposes XML injection risks when processing XML-based documents. Targeting these features identifies insecure parser configurations, allowing malicious entities to execute during document parsing.
cybersecwomanIdentify XML External Entity vulnerabilities in web applications via XML parsing and file inclusion attacks.
chatbotkitIdentify and chain SSRF vulnerabilities in web services with OOB verification.
roderikAnalyze API surfaces and configuration schemas to detect misuse-prone designs.
NickCrewIdentify OWASP Top 10 security vulnerabilities in web applications.
