Identify remote code execution vectors across web and infrastructure endpoints.
npx skills add https://github.com/jellaharshith/SWIFT --skill hunt-rce-jellaharshith
Please help me install this Agent Skill. Skill: hunt-rce Source: https://github.com/jellaharshith/SWIFT/tree/main/swift/skills/cbh/skills/hunt-rce Command: npx skills add https://github.com/jellaharshith/SWIFT --skill hunt-rce-jellaharshith
Hunt-rce helps you identify, triage, and validate remote code execution opportunities across common web and infrastructure attack surfaces, reducing guesswork by requiring concrete impact evidence before reporting.
Use it when you are conducting a bug bounty or red-team engagement and want a repeatable method to move from reconnaissance signals to confirmed RCE with minimal ambiguity.
Use the hunt-rce skill to locate RCE-by-construction surfaces on the target, then confirm exploitability with an output or out-of-band callback before writing the report.
High-intent search queries and answers about installing and using this skill.
Remote code execution validation requires proving attacker capability through command execution, file read, or out-of-band callbacks, articulating victim impact, and ensuring reproducibility within ten minutes from scratch.
Template injection, unsafe YAML or XML parsing, traversal-to-execution chains, and dependency confusion across management consoles, admin UIs, and execution endpoints are the primary RCE-by-construction surfaces to target.
Triage RCE primitives by mapping execution contexts and selecting likely payloads, then escalate findings when the same primitive yields higher impact on CGI-enabled or execution-capable surfaces.
Yes, this method applies to both web and infrastructure scenarios, targeting execution-adjacent surfaces like config UIs and parsing-heavy endpoints to map execution contexts and confirm exploitability.
Template injection is an execution-adjacent surface that can lead to RCE, but it requires validation through concrete output or out-of-band callbacks to confirm actual code execution before reporting.
Proving attacker capability reduces guesswork by demanding concrete impact evidence—command execution, file read, or out-of-band callbacks—ensuring deterministic triage and minimal ambiguity in bug bounty reports.
yhy0Automate detection and exploitation workflows for remote code execution vulnerabilities.
JoranHonigStructure security findings with vulnerability, impact, and remediation details.
EntroVyxMap user-controlled input to execution sinks and validate RCE via gadget chains.
dreadnodeFilter low-quality and false positive vulnerability findings from scanners and agent output.
