xxe-xml-external-entity

Guides testing of XML-processing applications for file disclosure, blind external-entity injection, and access to internal network resources.

When to use it

Use when XML, SVG, OOXML, SOAP, or parser-driven imports may resolve external entities, files, or internal network resources.

Give it a target application; it guides XML injection tests and interpretation of reflected content or out-of-band callbacks.