dtd-finder
A security tool that identifies DTDs in filesystem snapshots and generates XXE payloads using those local DTDs.
What is dtd-finder?
DTD Finder is a security tool that scans filesystem snapshots—such as those from Docker containers or server directories—to locate Document Type Definition (DTD) files. It then tests these DTDs to generate XML External Entity (XXE) attack payloads, helping identify exploitable XXE vulnerabilities in applications.
Security researchers, penetration testers, and application security professionals who need to automate the discovery of local DTDs for XXE exploitation during security assessments.
It automates the manual and time-consuming process of finding and testing local DTDs for XXE, providing ready-to-use payloads and detailed reports, which streamlines vulnerability discovery in complex environments like containerized applications.
Overview
List DTDs and generate XXE payloads using those local DTDs.
Use Cases
Best For
- Identifying XXE vulnerabilities in Java-based web applications
- Analyzing Docker container filesystems for local DTDs
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
