Xxe

metahttp

A bash script for scanning a target network for HTTP resources through XXE

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

XXEinjector

Automate the exploitation of XXE vulnerabilities

xxexploiter

A tool to help exploit XXE vulnerabilities by sending a crafted XML file to the server and parsing it to extract the data.

xxeserv

A mini webserver with FTP support for XXE payloads

Ground Control

A collection of scripts for debugging SSRF, blind XSS, and XXE vulnerabilities

docem

A tool to embed XXE and XSS payloads in various file formats

B-XSSRF

A toolkit for detecting and tracking Blind XSS, XXE, and SSRF vulnerabilities