expression-language-injection

Guides detection and exploitation of expression-language injection in Java applications.

When to use it

Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-controlled input.

Give it a suspected expression-injection surface in a Java application; it provides detection probes and framework-specific exploitation guidance.