Back to Playbooks
Vulnerability
vuln-xxe
XML External Entity (XXE) injection testing — local file read, SSRF via XXE, blind OOB XXE via DNS/HTTP callbacks, parameter entity XXE, DTD-based exfiltration, XXE via SVG/DOCX/XLSX.
Slug
vuln-xxe
Category
Vulnerability
Run Playbook
/gitest vuln-xxe