xslt-injection

Name: xslt-injection
Availability: InStock
Author: dreadnode

Exploits XSLT processor injection vulnerabilities for authorized web application security testing.

11|1|Updated May 4, 2026

Search Tags:#web-security #penetration-testing #ssrf #rce #file-read #xslt-injection #xml-exploitation

Ready to run

npx skills add https://github.com/dreadnode/capabilities --skill xslt-injection-dreadnode

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: xslt-injection
Source: https://github.com/dreadnode/capabilities/tree/main/capabilities/web-security/skills/xslt-injection
Command: npx skills add https://github.com/dreadnode/capabilities --skill xslt-injection-dreadnode

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables security testers to identify and exploit XSLT processor injection vulnerabilities in applications that process user-influenced XML stylesheets, eliminating the manual effort of crafting custom exploitation payloads for common XML processing endpoints.

Core Features & Use Cases

Processor Fingerprinting: Automatically identify the XSLT processor type and version to select compatible exploitation techniques.
Multi-Vector Exploitation: Supports file read, SSRF, remote code execution, and file write attacks across XSLT 1.0, 2.0+, and PHP-enabled processors.
Use Case: Use during web application security assessments of endpoints that handle XML file uploads, PDF generation from XML input, or XML transformation features to validate injection risk and potential impact.

Quick Start

Use the xslt-injection skill to test the XML transformation endpoint at https://your-target-app.com/transform for XSLT injection vulnerabilities and enumerate accessible internal services.

Frequently Asked Questions about xslt-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I exploit XSLT injection for remote code execution and file read?▼

XSLT injection exploitation targets vulnerable XSLT processors processing user-controlled XML stylesheets to achieve unauthorized file read, SSRF, and RCE. This Skill automates payload generation to test XML transformation endpoints, XML file uploads, and PDF generation pipelines.

Can I test XML transformation endpoints for SSRF vulnerabilities using XSLT payloads?▼

Yes, you can test XML transformation endpoints for SSRF vulnerabilities by injecting malicious XSLT payloads. This Skill supports identifying internal services and unauthorized access through XSLT processor injection during authorized web application penetration testing.

Does XSLT injection work on PHP-enabled processors for RCE?▼

XSLT injection works on PHP-enabled processors to achieve remote code execution. This Skill supports multi-vector exploitation across XSLT 1.0, 2.0+, and PHP-enabled processors to validate injection risk and potential impact.

What is the best way to fingerprint an XSLT processor during a penetration test?▼

The best way to fingerprint an XSLT processor is to inject specific payloads that identify the processor type and version. This Skill automates processor fingerprinting to select compatible exploitation techniques for file access, SSRF, and RCE.

When do I need XSLT injection payloads for web application security assessments?▼

You need XSLT injection payloads when testing applications that handle XML file uploads, PDF generation from XML input, or XML transformation features. This Skill eliminates manual payload crafting to assess exposure to unauthorized file access and remote code execution.

Are there limitations to XSLT injection for malicious file write operations?▼

XSLT injection limitations depend on the target processor supporting XSLT 1.0, 2.0+, or PHP-enabled features. This Skill targets specific processor capabilities for file write operations, but exploitation success varies by server configuration and processor version.