Skill

enterprise-tomcat-web

Provides Dasel v3 query patterns for Tomcat web.xml files to enumerate servlets, analyze filter chains, list listeners, extract context parameters, and inspect init-params.

Java

backend

security

npx claudepluginhub jamie-bitflight/claude_skills --plugin dasel

Tool Access

This skill uses the workspace's default tool permissions.

Preview

<when_to_use>

SKILL.md

Similar Skills

enterprise-spring-xml

Provides Dasel v3 selectors to query Spring bean factory XML for bean discovery, dependency wiring, JMS destination mapping, property injection extraction, and cross-bean reference tracing.

dasel

testing-for-xml-injection-vulnerabilities

Tests web apps for XML injection vulnerabilities including XXE (file read, blind, SSRF), XPath injection, and entity attacks to detect data leaks. For pentesting XML endpoints like SOAP APIs and file uploads.

3 files

cybersecurity-skills-zh

pentest-deserialization-xxe

Guides pentesting for deserialization (Java ysoserial, Python pickle, PHP unserialize, .NET BinaryFormatter, Ruby Marshal), XXE payloads, and file upload bypasses.

1 file

vuln-skills

Stats

Parent Repo Stars34

Parent Repo Forks5

Last CommitMar 23, 2026

Actions

View Source View Plugin View on GitHub View README

Help us improve

Share bugs, ideas, or general feedback.

Tomcat web.xml Dasel Query Patterns

<when_to_use>

Load this skill when querying a web.xml deployment descriptor — enumerating servlets, inspecting filter chains, listing listeners, extracting context parameters, or finding servlets by init-param value.

</when_to_use>

Domain skill for querying Tomcat web.xml files using dasel v3. Always use -i xml explicitly. XML attributes use - prefix in dasel friendly mode.

Servlet Discovery

# All servlet names dasel -f web.xml -i xml 'web-app.servlet.map(servlet-name)' # Count servlet definitions dasel -f web.xml -i xml 'len(web-app.servlet)'

Filter Chain Analysis

# Find filters by class pattern (e.g., Security filters) dasel -f web.xml -i xml 'web-app.filter.filter(filter-class ~ ".*Security.*")'

Replace Security with any class name fragment.

Listener Enumeration

# Count listener definitions dasel -f web.xml -i xml 'len(web-app.listener)'

Context Parameters

# All context-param names dasel -f web.xml -i xml 'web-app.context-param.map(param-name)'

Init Parameter Inspection

# Find servlets with a specific init-param name — filters parent collection by testing child length > 0 dasel -f web.xml -i xml 'web-app.servlet.filter(init-param.filter(param-name == "debug").len($this) > 0).map(servlet-name)'

Replace "debug" with the target param-name value.

All selectors require the full command prefix: dasel -f web.xml -i xml '<selector>'

Tomcat web.xml Dasel Query Patterns

<when_to_use>

</when_to_use>

Domain skill for querying Tomcat web.xml files using dasel v3. Always use -i xml explicitly. XML attributes use - prefix in dasel friendly mode.

Servlet Discovery

# All servlet names
dasel -f web.xml -i xml 'web-app.servlet.map(servlet-name)'

# Count servlet definitions
dasel -f web.xml -i xml 'len(web-app.servlet)'

Filter Chain Analysis

# Find filters by class pattern (e.g., Security filters)
dasel -f web.xml -i xml 'web-app.filter.filter(filter-class ~ ".*Security.*")'

Replace Security with any class name fragment.

Listener Enumeration

# Count listener definitions
dasel -f web.xml -i xml 'len(web-app.listener)'

Context Parameters

# All context-param names
dasel -f web.xml -i xml 'web-app.context-param.map(param-name)'

Init Parameter Inspection

# Find servlets with a specific init-param name — filters parent collection by testing child length > 0
dasel -f web.xml -i xml 'web-app.servlet.filter(init-param.filter(param-name == "debug").len($this) > 0).map(servlet-name)'

Replace "debug" with the target param-name value.

All selectors require the full command prefix: dasel -f web.xml -i xml '<selector>'