Detect XML External Entity vulnerabilities across Java, C#, Python, PHP, Go, and Node.js parsers.
npx skills add https://github.com/ersinkoc/security-check --skill sc-xxe
Please help me install this Agent Skill. Skill: sc-xxe Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-xxe Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-xxe
XML parsing across multiple languages is vulnerable to XXE attacks, risking file disclosure, SSRF, and denial of service.
Scan your codebase to identify unsafe XML parsing settings and generate actionable remediation guidance.
High-intent search queries and answers about installing and using this skill.
Detect XXE vulnerabilities by scanning your codebase to verify XML parser configurations across Java, C#, Python, PHP, Go, and Node.js. The analysis identifies unsafe external entity processing settings and generates actionable remediation guidance for secure parsing.
An XML External Entity attack exploits unsafe XML parsing to access local files, trigger SSRF, or cause denial of service. Auditing SOAP services ensures external entity processing is disabled to prevent sensitive data exposure during data interchange.
Secure office document parsing by scanning XML input handling to ensure parsers have external entity processing disabled. This verifies safe parsing practices are applied across APIs and data pipelines to prevent file disclosure vulnerabilities.
Yes, XXE detection supports Python and Go environments alongside Java, C#, PHP, and Node.js. It verifies parser configurations across these languages to ensure external entity processing is disabled and safe parsing practices are consistently applied.
RSS and Atom feeds pose an XXE risk because their XML input processing can inadvertently enable external entity resolution. Scanning these formats verifies that parser configurations disable external entities, preventing SSRF and sensitive file disclosure.
The best way to audit XML input handling is to scan codebases for unsafe parser configurations across all supported languages. This identifies vulnerable external entity processing settings and provides secure configuration steps to mitigate SSRF and file disclosure risks.
thoughtbotAnalyze Rails source code and execution paths to explain logic and architecture.
yaklangIdentify and exploit XML external entity vulnerabilities to read local files.
Exocore-OrganizationOrchestrate three security scanners in parallel and generate a prioritized risk summary.
RifteoDetect and exploit XML External Entity vulnerabilities in web applications.
