home/categories/framework-internals/yaklang-hack-skills-skills-expression-language-injection-skill-md
framework-internalsdevelopment

expression-language-injection

Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-controlled input in Spring, Struts2, Confluence, or similar frameworks.

yaklang
maintainer
yaklang
Обновлено 4/8/2026
Звёзды
83
Форки
10
quick start

Installation and usage

Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-controlled input in Spring, Struts2, Confluence, or similar frameworks.

Установка
$ install --globalskills.sh
Использование

После установки вы можете использовать этот skill, выполнив следующую команду в терминале:

skills use expression-language-injection