LogoClawIndex
CasesSkillsAbout
LogoClawIndex

xxe - XML External Entity Injection Testing

Tests XML parsers for external entity injection vulnerabilities to identify file disclosure and SSRF risks

Tags

Updated: 2026-03-26

Capabilities

Typical Inputs

Typical Outputs

What this skill does

  • detect XML input endpoints
  • inject XML test entities
  • read local files
  • make HTTP requests
  • detect blind XXE
  • bypass XML filters

Inputs

  • XML input endpoints
  • target application
  • Burp Suite or OWASP ZAP

Outputs

  • vulnerability detection results
  • file contents
  • HTTP responses
  • OOB callbacks

Requirements

  • Claude Code environment
  • Burp Suite or OWASP ZAP

Source

  • Spec: SKILL.md

ClawIndex

OpenClaw Skills & Use Case Index

ClawIndex is an ecosystem-driven index of OpenClaw skills and real-world use cases.

Index

Skills·
Cases

Meta

About·
Disclaimer·
Email·
GitHub
© 2026 ClawIndex All Rights Reserved.
web security
XXE
XML injection
SSRF
vulnerability testing
detect XML input endpoints
inject XML test entities
read local files
make HTTP requests
XML input endpoints
target application
Burp Suite or OWASP ZAP
vulnerability detection results
file contents
HTTP responses