skills.rest
Chid0k
Chid0kCOMMUNITY
Explore all skills by this author →
GitHub

xxe-detect

Detect and classify XML External Entity vulnerabilities in web applications.

Updated May 16, 2026
Search Tags:#vulnerability assessment#web application security#XXE#XML injection#XML parser
One-click install
npx skills add https://github.com/Chid0k/claude-marketplace --skill xxe-detect
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: xxe-detect
Source: https://github.com/Chid0k/claude-marketplace/tree/main/plugins/vuln-detect-plugin/skills/xxe-detect
Command: npx skills add https://github.com/Chid0k/claude-marketplace --skill xxe-detect

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pdfplumber, pypdf2, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill identifies and assesses XML External Entity (XXE) vulnerabilities within web applications, enabling security professionals to prevent and mitigate risks.

Core Features & Use Cases

  • XXE Detection: Safely discovers and confirms XXE vulnerabilities in XML-consuming applications.
  • Parser Behavior Classification: Classifies XML parser behavior for structured analysis.
  • Evidence Strategy: Provides strategies for capturing and validating XXE evidence.

Quick Start

Analyze the XML input from the endpoint /api/xml with the xxe-detect skill.

Frequently Asked Questions about xxe-detect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect XML External Entity vulnerabilities in web applications?▼

To detect XML External Entity vulnerabilities, you need a tool that safely discovers and confirms XXE injection points. This Skill identifies XXE vulnerabilities in XML-consuming applications by analyzing XML input from endpoints to validate evidence of exposure.

What is XML parser behavior classification in black-box security assessments?▼

XML parser behavior classification categorizes how an application's XML parser processes external entities during black-box assessments. It structures the analysis of parser responses to safely identify and confirm XXE vulnerabilities without causing system harm.

How do I validate XXE evidence during a web application vulnerability assessment?▼

Validating XXE evidence requires capturing and confirming parser responses to injected external entities. This Skill provides specific evidence strategies to securely verify that an XML parser processes malicious entities during black-box vulnerability assessments.

Can I use this XXE detection approach for black-box assessments without source code access?▼

Yes, this XXE detection approach is specifically designed for black-box assessments. It safely discovers and confirms XML External Entity vulnerabilities from the outside by analyzing XML inputs and classifying parser behavior without requiring internal source code access.

What is the best way to analyze XML injection risks for API endpoints?▼

Analyzing XML injection risks involves sending crafted XML payloads to API endpoints to observe parser behavior. This Skill safely detects and classifies XML External Entity vulnerabilities, providing structured analysis and evidence validation for endpoints consuming XML.

Related Skills

Explore More Software Engineering Skills→
Kisilev13Kisilev13

hunt-xxe

Detect and exploit XML External Entity vulnerabilities in XML parsers.

Community
Advanced
RifteoRifteo
30

xxe-phantom

Detect and exploit XML External Entity vulnerabilities in web applications.

Official
Advanced
balsm-healthbalsm-health
2

testing-for-xxe-injection-vulnerabilities

Automate detection and exploitation of XML External Entity injection vulnerabilities.

Official
Advanced
utsavthakurutsavthakur

xxe-xml-external-entity

Exploit and mitigate XXE vulnerabilities in XML, SVG, OOXML, and SOAP.

Community
Advanced