hunt-rce

What problem does it solve?

Hunt-rce helps you quickly identify, verify, and report Remote Code Execution vulnerabilities so you can prove real impact instead of guessing from superficial findings.

Core Features & Use Cases

• RCE-oriented targeting: Focuses on high-value surfaces such as admin/management consoles, infrastructure tooling, and execution-capable endpoints.
• Structured attack workflow: Guides you through mapping execution contexts, enumerating likely interfaces, and validating reproduction with a clear gate checklist.
• Concrete exploit patterns: Covers practical RCE classes including template injection, unsafe YAML/XML deserialization, path traversal to execution, dependency confusion, Kubernetes exposure, SpEL injection, and common bypass strategies.
• OOB confirmation discipline: Emphasizes verification via output checks and out-of-band callbacks (e.g., Collaborator/interactsh) to avoid blind or misleading reports.

Quick Start

Use the hunt-rce skill to help you investigate a target URL you provide for potential Remote Code Execution by following the skill’s RCE methodology and validation gates.