xcat v1.0.4 - exploit and investigate blind XPath injection vulnerabilities

[itsMe]

XCat

XCat is a command-line tool to exploit and investigate blind XPath injection vulnerabilities.

It supports a large number of features:

    Auto-selects injections (run xcat injections for a list)
    Detects the version and capabilities of the xpath parser and selects the fastest method of retrieval
    Built-in out-of-bound HTTP server
        Automates XXE attacks
        Can use OOB HTTP requests to drastically speed up retrieval
    Custom request headers and body
    Built-in REPL shell, supporting:
        Reading arbitrary files
        Reading environment variables
        Listing directories
        Uploading/downloading files (soon TM)

To see this hidden content, you must like this content.