A Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
Use this tool only on systems you own or have explicit permission to test.
XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications.