Lightlines
By yaklang

xslt-injection

yaklang3.2k installs

Find injection flaws in XML transform endpoints.

What it does

Guides authorized testing of XSLT transform endpoints to identify injection vulnerabilities and processor-specific exploitation paths.

When to use it

Use when user-controlled stylesheets or transform endpoints are within the authorized testing scope.

How to use it

Give it an authorized transform endpoint; it provides processor-specific XSLT injection testing guidance.

What you provide

  • the transform endpoint to test

Latest review

What you need · 0

No setup requirements listed.


Access · 1

This skill

transform endpoints

Write

Sends injection probes to endpoints