{"id":13843821,"url":"https://github.com/c0ny1/xxe-lab","last_synced_at":"2025-04-04T07:05:12.487Z","repository":{"id":37413190,"uuid":"120608523","full_name":"c0ny1/xxe-lab","owner":"c0ny1","description":"一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo","archived":false,"fork":false,"pushed_at":"2022-11-28T12:56:03.000Z","size":1503,"stargazers_count":787,"open_issues_count":5,"forks_count":181,"subscribers_count":11,"default_branch":"master","last_synced_at":"2025-03-28T06:03:59.654Z","etag":null,"topics":["csharp-xxe-demo","java-xxe-demo","php-xxe-demo","python-xxe-demo"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/c0ny1.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-02-07T11:49:38.000Z","updated_at":"2025-03-26T16:29:22.000Z","dependencies_parsed_at":"2023-01-21T13:16:27.319Z","dependency_job_id":null,"html_url":"https://github.com/c0ny1/xxe-lab","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/c0ny1%2Fxxe-lab","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/c0ny1%2Fxxe-lab/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/c0ny1%2Fxxe-lab/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/c0ny1%2Fxxe-lab/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/c0ny1","download_url":"https://codeload.github.com/c0ny1/xxe-lab/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247135141,"owners_count":20889420,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["csharp-xxe-demo","java-xxe-demo","php-xxe-demo","python-xxe-demo"],"created_at":"2024-08-04T17:02:28.348Z","updated_at":"2025-04-04T07:05:12.461Z","avatar_url":"https://github.com/c0ny1.png","language":"Python","funding_links":[],"categories":["Python","Python (1887)"],"sub_categories":[],"readme":"# xxe-lab\n\n![XXE-Lab](doc/XXE-LAB.png)\n\nxxe-lab是一个使用php,java,python,C#四种当下最常用语言的网站编写语言来编写的一个存在xxe漏洞的web demo。\n\n由于xxe的payload在不同的语言内置的xml解析器中解析效果不一样，为了研究它们的不同。我分别使用当下最常用的四种网站编写语言写了存在xxe漏洞的web dome,为了以后得测试方便，就将这些demoe整合为xxe-lab。代码力求简洁简单，尽量只使用原生库，同时在注释部分包含了修复漏洞的代码。ruby版本有时间再加入！\n\n## 安装\n#### 1.php_xxe\n\n直接放在php web页面下即可运行。\n\n#### 2.java_xxe\n\njava_xxe是serlvet项目，直接导入eclipse当中即可部署运行。\n\n#### 3.python_xxe: \n\n* 安装好Flask模块\n* python xxe.py\n\n#### 4.Csharp_xxe \n直接导入VS中运行\n## 主界面\n\n![php_xxe](doc/php_xxe.png)\n\n![java_xxe](doc/java_xxe.png)\n\n![python_xxe](doc/python_xxe.png)\n\n![Csharp_xxe](doc/Csharp_xxe.png)\n\n## 测试\n搭建好环境后就可以对各个语言版本进行测试了。这里以PHP为例子。\n\n![php XXE演示](doc/php_xxe_demo.gif)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fc0ny1%2Fxxe-lab","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fc0ny1%2Fxxe-lab","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fc0ny1%2Fxxe-lab/lists"}