xslt-injection

To test XSLT injection, you can run an automated assessment against a target URL to fingerprint the processor, detect XXE and SSRF vectors, and identify potential RCE surfaces using EXSLT write primitives.

XSLT processor fingerprinting determines the specific XSLT processor used by the target application, which is crucial for mapping available EXSLT extensions and selecting accurate exploitation vectors during security testing.

XSLT injection can be used to detect and exploit XML External Entity (XXE) and Server-Side Request Forgery (SSRF) vulnerabilities by manipulating XSLT processing and transformation inputs in the target application.

Remote code execution via XSLT transformation is achieved by identifying RCE surfaces and leveraging EXSLT extensions to write to arbitrary files on the server, escalating the injection beyond data extraction.

XSLT injection testing supports applications using EXSLT extensions by specifically targeting these extensions to establish file write primitives, which are foundational for escalating to remote code execution.

Automated XSLT vulnerability assessment focuses primarily on processor fingerprinting, XXE, SSRF, and RCE surfaces, meaning complex logic flaws or context-specific injection points may require manual validation.