xslt-injection
CommunityTest XSLT injection across engines.
AuthorYliken
Version1.0.0
Installs0
System Documentation
What problem does it solve?
XSLT injection testing helps security teams identify and characterize server-side transformation vulnerabilities across different processor families, enabling proactive risk mitigation.
Core Features & Use Cases
- Fingerprint processor family (Java/Xalan, Saxon, libxslt) and determine applicable exploitation paths.
- Validate external entities and document() SSRF vectors, including out-of-band scenarios where allowed.
- Identify EXSLT write capabilities and potential extension surfaces for PHP/Java/.NET stacks.
- Provide safe, authorization-governed testing guidance with lab-friendly payloads and remediation strategies.
Quick Start
Identify XSLT processors in scope and run targeted payloads to map capabilities.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: xslt-injection Download link: https://github.com/Yliken/ai4/archive/main.zip#xslt-injection Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.