{"adoption": {"forks": 325, "observed_at": "2026-08-28T04:05:37.462823+00:00", "stars": 1795}, "canonical_url": "https://ross.abutalabs.com/products/xxeinjector", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.", "domain": ["security", "penetration-testing", "developer-tools"], "enriched": true, "function": ["penetration-testing", "security", "cli"], "health_score": 20, "homepage": null, "language": "Ruby", "license": null, "license_family": "other", "maturity": "maintenance", "member_repos": ["enjoiz/XXEinjector"], "name": "enjoiz/XXEinjector", "platform": ["cli", "windows"], "pushed_at": "2024-12-01T15:25:27+00:00", "repo": "enjoiz/XXEinjector", "stars": 1795, "tags": ["xxe", "xml-external-entity", "exploitation", "out-of-band", "ruby", "offensive-security", "web-security", "linux", "macos"], "topics": [], "urls": [], "use_cases": ["automatically exploit XXE vulnerabilities in web applications", "retrieve files from a server via out-of-band XXE", "enumerate directories in vulnerable Java applications", "bruteforce file paths through XXE injection", "test for XSLT injection and second-order XXE", "steal Windows hashes or run commands via PHP expect during a pentest"], "what_it_is": "XXEinjector is a Ruby command-line tool that automates exploitation of XML External Entity (XXE) vulnerabilities using direct and out-of-band methods such as FTP, HTTP, and Gopher. It can retrieve files, enumerate directories, steal Windows hashes, execute commands via PHP expect, and upload files.", "when_to_avoid": ["you need a general-purpose web vulnerability scanner rather than an XXE-specific tool", "you require a maintained tool with a license and active development", "you are not authorized to test the target system"], "when_to_choose": ["you are doing authorized penetration testing of web apps with XML input", "you need automated direct and OOB XXE exploitation with multiple protocols", "you want extras like PHP filter encoding, file upload, or command execution via XXE"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/xxeinjector", "repo": "enjoiz/XXEinjector", "role": "main", "score": 32}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:22:51.075410+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "65c64494cc3ac47f0a2dc7d2a29f578a45a2112996821f0262b00f29f5bb556a", "fetched_at": "2026-08-28T04:05:37.462823+00:00", "kind": "readme", "missing": false, "url": "https://github.com/enjoiz/XXEinjector"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:22:51.075410+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "65c64494cc3ac47f0a2dc7d2a29f578a45a2112996821f0262b00f29f5bb556a", "fetched_at": "2026-08-28T04:05:37.462823+00:00", "kind": "readme", "missing": false, "url": "https://github.com/enjoiz/XXEinjector"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:22:51.075410+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "65c64494cc3ac47f0a2dc7d2a29f578a45a2112996821f0262b00f29f5bb556a", "fetched_at": "2026-08-28T04:05:37.462823+00:00", "kind": "readme", "missing": false, "url": "https://github.com/enjoiz/XXEinjector"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:22:51.075410+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "65c64494cc3ac47f0a2dc7d2a29f578a45a2112996821f0262b00f29f5bb556a", "fetched_at": "2026-08-28T04:05:37.462823+00:00", "kind": "readme", "missing": false, "url": "https://github.com/enjoiz/XXEinjector"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:22:51.075410+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "65c64494cc3ac47f0a2dc7d2a29f578a45a2112996821f0262b00f29f5bb556a", "fetched_at": "2026-08-28T04:05:37.462823+00:00", "kind": "readme", "missing": false, "url": "https://github.com/enjoiz/XXEinjector"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:22:51.075410+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "65c64494cc3ac47f0a2dc7d2a29f578a45a2112996821f0262b00f29f5bb556a", "fetched_at": "2026-08-28T04:05:37.462823+00:00", "kind": "readme", "missing": false, "url": "https://github.com/enjoiz/XXEinjector"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:37.462823+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:22:51.075410+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "65c64494cc3ac47f0a2dc7d2a29f578a45a2112996821f0262b00f29f5bb556a", "fetched_at": "2026-08-28T04:05:37.462823+00:00", "kind": "readme", "missing": false, "url": "https://github.com/enjoiz/XXEinjector"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:22:51.075410+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "65c64494cc3ac47f0a2dc7d2a29f578a45a2112996821f0262b00f29f5bb556a", "fetched_at": "2026-08-28T04:05:37.462823+00:00", "kind": "readme", "missing": false, "url": "https://github.com/enjoiz/XXEinjector"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:22:51.075410+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "65c64494cc3ac47f0a2dc7d2a29f578a45a2112996821f0262b00f29f5bb556a", "fetched_at": "2026-08-28T04:05:37.462823+00:00", "kind": "readme", "missing": false, "url": "https://github.com/enjoiz/XXEinjector"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:22:51.075410+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "65c64494cc3ac47f0a2dc7d2a29f578a45a2112996821f0262b00f29f5bb556a", "fetched_at": "2026-08-28T04:05:37.462823+00:00", "kind": "readme", "missing": false, "url": "https://github.com/enjoiz/XXEinjector"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_releases", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 4127, "days_push": 640, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 32, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}