xxe-xml-external-entity

What problem does it solve?

XXE vulnerabilities allow an attacker to read local files, perform SSRF, and exfiltrate data through XML parsers across diverse formats such as XML, SVG, OOXML, and SOAP. This playbook provides structured tactics for detection, exploitation, and mitigation, enabling secure testing and effective remediation planning.

Core Features & Use Cases

• Cross-format XXE payloads for XML, SVG, OOXML (docx/xlsx/pptx), SOAP, and JSON→XML transformations.
• OOB and blind XXE techniques including collaborator-based exfiltration and error-based leakage, plus SSRF chaining.
• Defensive guidance with configuration hardening, parser safeguards, and validation strategies for reducing XXE risk in production.

Quick Start

Identify an XML input point (SOAP, SVG, OOXML, or parser-driven import) and apply the classic and blind XXE payloads to verify vulnerability.