Skip to content

FrancescoDiSalesGithub/XXE-gen

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

XXE-gen

XXE vulnerability creator

How to use

python3 xxe-gen.py [operation] [entity]

where:

  • operation = what do you want to do with the XXE vulnerability
  • entity = the name of the xml entity

the possible operations are injection and dos in which:

  • injection -> does a xxe
  • dos -> implements a dos xxe
  • base64 -> does a base64 xxe
  • phpwrap -> inserts in the entity a php filter
  • xinclude -> does a xinclude attack
  • soap -> does a soap xxe

some examples about how to run it:

      python3 xxe-gen.py injection banana
     python3 xxe-gen.py dos banana