Shypd.aiThe largest open index of AI toolsdocem is an open-source security tool that embeds XXE and XSS payloads in various document formats like docx, odt, and pptx. It helps security researchers test document security and identify vulnerabilities by creating documents with embedded attack vectors.
Trending
About
docem is a powerful open-source utility designed for security researchers and penetration testers to embed XXE (XML External Entity) and XSS (Cross-Site Scripting) payloads into common document formats such as docx, odt, pptx, and xlsx. These document types are essentially zip archives containing XML files, making them susceptible to such injection techniques. The tool streamlines the process of creating documents with embedded payloads, addressing the limitations of existing tools like oxml_xxe when needing to generate numerous documents with varied payload placements. Users can specify a sample document with 'magic symbols' that docem replaces with the chosen XXE or XSS payloads, offering different payload modes (per_document, per_file, per_place) for granular control over embedding. This makes docem an invaluable asset for comprehensive document security testing and vulnerability assessment.
Capabilities
Pricing & Plans
Open Source
Free
FAQs
Trending
