Identify XXE vulnerabilities in XML parsers across Java, C#, Python, PHP, Go, and Node.js.
npx skills add https://github.com/fatihkan/badi --skill sc-xxe-fatihkan
Please help me install this Agent Skill. Skill: sc-xxe Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-xxe Command: npx skills add https://github.com/fatihkan/badi --skill sc-xxe-fatihkan
XML External Entity injection is a critical vulnerability class where XML parsers process external entity declarations, enabling file disclosure, SSRF, denial-of-service, and potentially remote code execution.
Run an XXE assessment across XML processing components to identify external entity handling weaknesses.
High-intent search queries and answers about installing and using this skill.
Detect XXE vulnerabilities by scanning XML parsers in Java, C#, Python, PHP, Go, and Node.js to discover unsafe external entity handling. The assessment identifies code patterns where DTD processing enables file disclosure, SSRF, or DoS, and generates actionable fixes.
An XML External Entity (XXE) injection is a vulnerability where XML parsers process external entity declarations. This exposure allows attackers to read local files, perform SSRF, cause denial-of-service, and potentially execute remote code by manipulating XML inputs.
Secure XML parsers by disabling external entities and limiting DTD processing across your project's languages. The secure configuration guidance implements threat modeling and verification steps to demonstrate safe parsing and eliminate XXE risks.
Yes, you can audit services accepting XML inputs to surface XXE risks. The assessment targets XML processing components to identify external entity handling weaknesses that lead to file disclosure and SSRF, generating actionable fixes to reduce exposure.
Yes, XXE detection supports Node.js and Go projects, alongside Java, C#, Python, and PHP. It applies discovery patterns to identify unsafe XML usage and provides guidance for secure parser configurations specific to these environments.
RifteoDetect and exploit XML External Entity vulnerabilities in web applications.
dy9759Identify and remediate security vulnerabilities across IT infrastructure and applications.
summarybotngScan code, dependencies, and configurations for OWASP Top 10 vulnerabilities.
dungsnowaxeDetect XXE injection vulnerabilities by injecting malicious XML payloads into endpoints.
