home/categories/framework-internals/yaklang-hack-skills-skills-expression-language-injection-skill-md
framework-internalsdevelopment
expression-language-injection
Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-controlled input in Spring, Struts2, Confluence, or similar frameworks.
maintainer
yaklang
Mis à jour 4/8/2026
Étoiles
83
Forks
10
quick start
Installation and usage
Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-controlled input in Spring, Struts2, Confluence, or similar frameworks.
Installation
$ install --globalskills.sh
Utilisation
Après l'installation, vous pouvez utiliser ce skill en exécutant la commande suivante dans votre terminal :
skills use expression-language-injection