Detect and exploit XML External Entity vulnerabilities in web applications.
npx skills add https://github.com/Rifteo/skills --skill xxe-phantom
Please help me install this Agent Skill. Skill: xxe-phantom Source: https://github.com/Rifteo/skills/tree/main/xxe-phantom Command: npx skills add https://github.com/Rifteo/skills --skill xxe-phantom
This Skill provides a comprehensive methodology for detecting and exploiting XML External Entity (XXE) vulnerabilities, empowering users to identify and leverage XXE flaws in their target systems.
Use the xxe-phantom skill to trigger an XXE on the target server by sending a request with the following XML payload to the endpoint /api/xml:
<?xml version="1.0"?>
<!DOCTYPE root [
<!ENTITY xxe SYSTEM "file:///etc/passwd">
]>
<root><data>&xxe;</data></root>
High-intent search queries and answers about installing and using this skill.
Detect XXE vulnerabilities by sending crafted XML payloads to application endpoints and analyzing server responses for external entity processing. If the server parses the entities, it confirms an XML External Entity vulnerability.
Blind OOB exfiltration in XXE extracts data silently without direct server responses by defining external entities that point to an attacker-controlled server. The server processes the XML and sends the target data to that external endpoint.
Yes, you can read local files by defining an XML external entity that references local file paths like file:///etc/passwd. If the application parses the entity, it discloses the file content in the response or via out-of-band channels.
Bypassing a WAF when exploiting XXE involves modifying XML payloads using encoding techniques, parameter entities, or alternative schema definitions to evade signature filters while still triggering the XML parser to process the external entity.
Yes, XXE exploitation works for SSRF chaining by defining external entities that reference internal network URLs. When the XML parser processes the entity, it sends server-side requests to internal services, facilitating SSRF.
An XML payload might not trigger an external entity if the server disables external entity resolution in its parser configuration, or if a WAF blocks the payload. Modifying payload encoding or using alternative entity definitions can help bypass these constraints.
AcczdyAnalyze SOAP WSDLs and test endpoints for XML injection and WS-Security weaknesses.
AcczdySimulate internal network penetration tests to reveal lateral movement and privilege escalation paths.
Kisilev13Detect and exploit XML External Entity vulnerabilities in XML parsers.
cmndcntrlcyberDetect and exploit remote code execution vulnerabilities in applications.